GRC Analyst

Intec Select; Strasbourg; À distance; EUR 50 000 - 55 000; Plein temps

Résumé du poste

An award-winning cybersecurity firm is seeking a GRC Analyst specializing in ISO 27001 to help clients achieve their governance, risk, and compliance objectives. This role offers a fantastic opportunity for individuals with consultancy experience who thrive in problem-solving and client interactions. As part of a dynamic team, you'll assist in implementing and maintaining Information Security Management Systems, conduct audits, and develop security policies. Join a forward-thinking company where your contributions will help shape the future of cybersecurity and compliance.

Qualifications

• Expertise in ISO 27001 with experience in implementation and auditing.
• Strong understanding of risk management principles and GRC frameworks.

Responsabilités

• Assist clients with ISO 27001 ISMS implementation and improvement.
• Conduct gap analysis and risk assessments to identify non-compliance.

Connaissances

ISO 27001

Risk Management

GRC Frameworks

Communication Skills

Problem-Solving

Description du poste

GRC Analyst – Cybersecurity – €50-55k – Remote

Overview :

We are currently partnered with an award-winning cybersecurity firm specialising in Identity and Access Management (IAM) solutions. They are seeking a GRC Analyst with a strong background in ISO 27001 to support their clients in achieving their governance, risk, and compliance objectives. This is a fantastic opportunity for someone with consultancy experience who enjoys problem-solving, client interaction, and continuous learning in a fast-paced environment.

Role & Responsibilities :

• Assist clients with the implementation, maintenance, and improvement of their ISO 27001 Information Security Management Systems (ISMS)
• Conduct gap analysis, risk assessments, and internal audits to identify areas of non-compliance and recommend solutions
• Develop and review information security policies, procedures, and controls
• Support clients through ISO 27001 certification and surveillance audits
• Deliver clear and actionable reports and recommendations
• Provide advisory services on GRC best practices and industry standards
• Collaborate with cross-functional teams to ensure projects are delivered on time and to the highest standard
• Stay updated on industry trends, regulatory requirements, and emerging risks

Essential Skills & Experience :

• ISO 27001 expertise, including implementation, auditing, or consultancy experience
• Previous experience in a consultancy or client-facing environment
• Strong understanding of risk management principles and GRC frameworks
• Experience with other standards such as ISO 22301, NIST, or SOC 2
• Excellent communication, stakeholder management, and problem-solving skills
• Relevant certifications (e.g., ISO 27001 Lead Auditor / Implementer, CISA, CISM) are a bonus