Senior GRC Analyst - ISO 27001 & SOC 2 Automation

Printify; España; Remote; EUR 51,000 - 61,000; Full time

Benefits offered by this job

Remote work option

Private health insurance

Extra paid days off

Birthday day off

Learning opportunities

Mentorship and hackathons

Lunch provided at Riga office

Employee merch discount

Job summary

FYUL is seeking a Cybersecurity Governance & Assurance Manager to lead audits, evidence collection, vendor security, and GRC automation. This senior individual-contributor role reports directly to the manager and emphasizes depth of expertise and ownership of outcomes.

Responsibilities include managing ISO 27001 and SOC 2 audit cycles, policy development, risk register maintenance, and cross-functional collaboration with auditors and stakeholders. Remote or Riga office options available.

Qualifications

• 5+ years in cybersecurity GRC, IT audit, or security compliance with hands-on ISO 27001 and/or SOC 2 audits.
• Strong communication and negotiation skills under pressure from auditors, vendors, and stakeholders.
• Automation capability: scripts, integrations, GRC implementations, or AI-assisted workflows.
• Self-directed with ownership of ambiguous problems from start to finish.
• Excellent written and spoken English.

Responsibilities

• Audit management: plan and execute audits across ISO 27001, SOC 2, and related frameworks; manage evidence and findings.
• GRC automation: design and implement automation for evidence collection and recurring activities.
• Vendor security operations: assess third-party vendors during onboarding and reviews.
• Risk management: maintain risk register and track remediation plans.
• Policies, documentation, and security awareness: develop policies and training materials.

Skills

Cybersecurity GRC

IT audit

Security compliance

Automation scripting

Stakeholder management

Tools

GRC platforms

Job description

FYUL is seeking a Cybersecurity Governance & Assurance Manager to lead audits, evidence collection, vendor security, and GRC automation. This senior individual-contributor role reports directly to the manager and emphasizes depth of expertise and ownership of outcomes.

Responsibilities include managing ISO 27001 and SOC 2 audit cycles, policy development, risk register maintenance, and cross-functional collaboration with auditors and stakeholders. Remote or Riga office options available.