GRC Analyst: Risk, Audit & Compliance

Hub; København; On-site; DKK 600,000 - 800,000; Full time

Job summary

Hub seeks a GRC Analyst to manage daily risk and control operations, maintain our documentation library and support audit coordination within our Trust Office. You will collaborate with the GRC Officer, CTO and Product Team.

You will perform control testing, maintain risk indicators, and help keep our security documentation current to enable customers to review security reviews themselves. This role requires strong communication and cross-functional collaboration.

Qualifications

• 3+ years in governance of risk and compliance, IT audit, or risk management.
• Solid understanding of ISO 27001, SOC 2 and risk methodologies.
• Ability to translate vulnerability data into actionable risk assessments.
• Ability to balance security with business agility and engineering workflows.

Responsibilities

• Execute routine security control testing and maintain Key Risk Indicators.
• Maintain the public security trust center and standard security documentation.
• Assist with routine customer inquiries, security questionnaires and vendor assessments.
• Support external audits and regular policy reviews (e.g., ISMS ISAE 3000).
• Evaluate third-party vendors and cloud subprocessors against security standards.
• Be the first point of contact for vulnerability disclosures and coordinate remediation with engineering.

Skills

Communication skills

Risk assessment

Security controls understanding

Cross-functional collaboration

Job description

Hub seeks a GRC Analyst to manage daily risk and control operations, maintain our documentation library and support audit coordination within our Trust Office. You will collaborate with the GRC Officer, CTO and Product Team.

You will perform control testing, maintain risk indicators, and help keep our security documentation current to enable customers to review security reviews themselves. This role requires strong communication and cross-functional collaboration.