GRC Analyst

JR France; Paris; À distance; EUR 55 000; Plein temps

Résumé du poste

A leading cybersecurity firm seeks a GRC Analyst to support clients with ISO 27001 compliance. This role involves assisting with implementation, conducting audits, and providing strategic recommendations for governance and risk management. Ideal for someone with strong consultancy background and problem-solving skills.

Qualifications

• Strong background in ISO 27001 and consultancy experience.
• Previous experience in a client-facing environment with great problem-solving skills.
• Excellent communication and ability to develop security policies.

Responsabilités

• Implement and maintain ISO 27001 Information Security Management Systems.
• Conduct risk assessments and internal audits.
• Develop and review information security policies and controls.

Connaissances

ISO 27001 expertise

Risk management principles

Communication

Stakeholder management

Problem-solving

Formation

Relevant certifications (e.g., ISO 27001 Lead Auditor/Implementer, CISA, CISM)

Description du poste

Social network you want to login/join with:

GRC Analyst – Cybersecurity – €55,000 – Remote

Overview:

We are currently partnered with an award-winning cybersecurity firm specialising in Identity and Access Management (IAM) solutions. They are seeking a GRC Analyst with a strong background in ISO 27001 to support their clients in achieving their governance, risk, and compliance objectives. This is a fantastic opportunity for someone with consultancy experience who enjoys problem-solving, client interaction, and continuous learning in a fast-paced environment.

Role & Responsibilities:

• Assist clients with the implementation, maintenance, and improvement of their ISO 27001 Information Security Management Systems (ISMS)
• Conduct gap analysis, risk assessments, and internal audits to identify areas of non-compliance and recommend solutions
• Develop and review information security policies, procedures, and controls
• Support clients through ISO 27001 certification and surveillance audits
• Deliver clear and actionable reports and recommendations
• Provide advisory services on GRC best practices and industry standards
• Collaborate with cross-functional teams to ensure projects are delivered on time and to the highest standard
• Stay updated on industry trends, regulatory requirements, and emerging risks
• ISO 27001 expertise, including implementation, auditing, or consultancy experience
• Previous experience in a consultancy or client-facing environment
• Strong understanding of risk management principles and GRC frameworks
• Experience with other standards such as ISO 22301, NIST, or SOC 2
• Excellent communication, stakeholder management, and problem-solving skills
• Relevant certifications (e.g., ISO 27001 Lead Auditor/Implementer, CISA, CISM) are a bonus