GRC & Information Security Analyst – Risk & Compliance

Verisure; Pozuelo de Alarcón; On-site; EUR 55,000 - 90,000; Full time

Job summary

Verisure is seeking an IT Security Governance, Risk, and Assurance professional to identify, assess, and mitigate cybersecurity risks across IT and business processes. You will support the implementation of our organization’s strategies around cyber and IT controls by working with Technology and other business units.

The role focuses on risk assessment, control ownership dialogue, and delivering remediation actions to strengthen security, with emphasis on GDPR, NIST, and ISO27001 compliance.

Qualifications

• Bachelor's degree in a field related to information security, risk, or compliance.
• Experience in defining and executing an information security and IT risk control framework for internal and external partners.
• Experience performing risk, compliance, and maturity assessments using international standards and best practices.

Responsibilities

• Focus on building and maintaining the Audit function within Information Security.
• Manage and mature the Information Security & IT risk control framework to enable effective operation and monitoring of controls.
• Document and report control failures and gaps to stakeholders; provide remediation guidance and, when needed, drive projects to deploy mitigations.
• Develop security policies, standards, and procedures to drive standardization and centralization of control activities.
• Perform risk assessment activities across the organization and identify risk mitigation strategies and controls.
• Ensure risks and remediation plans are regularly addressed and implemented by owners.
• Support activities to maintain compliance with regulations and standards (GDPR, NIST, ISO27001, SOC 2, COBIT, ITIL, etc.).
• Audit and document processes and prepare reports summarizing findings for management and stakeholders.

Skills

Effective communication

Team collaboration

Fluent English

Stakeholder engagement

Problem solving

Education

Bachelor's degree in a relevant field

Tools

GRC tool

Job description

Verisure is seeking an IT Security Governance, Risk, and Assurance professional to identify, assess, and mitigate cybersecurity risks across IT and business processes. You will support the implementation of our organization’s strategies around cyber and IT controls by working with Technology and other business units.

The role focuses on risk assessment, control ownership dialogue, and delivering remediation actions to strengthen security, with emphasis on GDPR, NIST, and ISO27001 compliance.