GRC Analyst: Risk, Compliance & Audit Operations

Idura; København; On-site; DKK 600,000 - 800,000; Full time

Job summary

Idura is seeking a GRC Analyst to manage daily risk and control operations, maintain our documentation library and support audit coordination within our Trust Office. You’ll work closely with the GRC Officer, CTO and partner heavily with the Product Team.

You will collaborate to scale our governance operating model and strengthen security practices across a SaaS environment, balancing risk and business agility while facilitating security reviews.

Qualifications

• 3+ years in governance, risk & compliance, IT audit, or risk management.
• Solid understanding of ISO 27001, SOC 2, and risk methodologies.
• Ability to translate vulnerability data into actionable risk assessments.

Responsibilities

• Execute routine security control testing and track key risk indicators.
• Maintain the public security trust center and security documentation up-to-date.
• Assist with customer inquiries, security questionnaires and vendor assessments.
• Support external audits and policy reviews.
• Evaluate third-party vendors and cloud subprocessors for security standards.
• Serve as first contact for vulnerability disclosures and coordinate remediation.

Skills

Governance & compliance

Risk assessment

Security controls

Communication skills

Cloud platforms

Audit coordination

Job description

Idura is seeking a GRC Analyst to manage daily risk and control operations, maintain our documentation library and support audit coordination within our Trust Office. You’ll work closely with the GRC Officer, CTO and partner heavily with the Product Team.

You will collaborate to scale our governance operating model and strengthen security practices across a SaaS environment, balancing risk and business agility while facilitating security reviews.