GRC Specialist

Farfetch; Bordeaux; Sur place; EUR 70 000 - 110 000; Plein temps

Avantages offerts par ce poste

Health insurance for the whole family

Extra days off and sabbatical program

Training opportunities and Udemy

Résumé du poste

Farfetch is seeking a Cyber Governance, Risk and Compliance Specialist to join our Information Security team. You will strengthen governance, risk management, and compliance practices, ensuring our policies and controls align with business needs and industry standards.

You will collaborate with stakeholders to identify risks, monitor compliance, support audits, and continuously improve our Information Security framework while advancing security awareness across the organization.

Qualifications

• Degree in Computer Science, Information Security, or related field.
• Background in software development or systems administration.
• 4+ years in information security, GRC, risk or compliance.
• Understanding of network protocols, design, and operations.
• Knowledge of information security governance frameworks (COBIT, ISO 27001).
• Experience reviewing security policies and gap analyses.
• Familiarity with OCTAVE and NIST SP 800-30 risk methods.
• Certifications like CRISC, CISA, CEH are a plus.
• DPIA experience is a plus.
• Experience with AI and Data Governance projects is a plus.
• Strong English communication, both written and verbal.
• Self-motivated, proactive, and comfortable with minimal supervision.

Responsabilités

• Develop, implement, and continuously improve Farfetch's Information Security governance framework.
• Strengthen security controls and reduce risk of unauthorized access.
• Review and audit information security policies and documentation.
• Monitor compliance with laws, regulations and standards.
• Conduct information security risk assessments and mitigation actions.
• Support audits, assessments, and gap analyses across Information Security.
• Coordinate company-wide security controls to protect assets.
• Raise information security awareness across the business.
• Collaborate with stakeholders to manage risk, controls, policies and compliance.
• Contribute to Data Privacy, AI Governance, and Data Governance initiatives.

Connaissances

English communication

Network fundamentals

Self-motivated

Minimal supervision

Formation

Bachelor's degree in Computer Science or Information Security

Certifications: CRISC, CISA, CEH (optional)

Outils

COBIT

ISO 27001

NIST SP 800-30

Description du poste

Farfetch is a leading global marketplace for the luxury fashion industry. The Farfetch Marketplace connects customers in over 190 countries and territories with items from more than 50 countries and over 1,400 of the world's best brands, boutiques, and department stores, delivering a truly unique shopping experience and access to the most extensive selection of luxury on a global marketplace.

TECHNOLOGY

We're on a mission to build end-to-end products and technology that powers the an incredible e-commerce experience for luxury customers everywhere, understanding the motivations and needs of our customers and partners, to designing and testing hypotheses, to creating industry-leading experiences for luxury customers.

PORTO

Our office is near Porto, in the north of Portugal, and is located in a vibrant business hub. It offers a dynamic and welcoming environment where our employees can connect and network with a large community of tech professionals.

THE ROLE

We're looking for a Cyber Governance, Risk and Compliance Specialist to join our Information Security team. In this role, you'll help strengthen Farfetch's cybersecurity governance, risk management, and compliance practices, ensuring our security policies, controls, and processes align with business needs, regulatory requirements, and industry standards. You'll work closely with stakeholders across the business to identify and assess security risks, monitor compliance, support audits and assessments, and continuously improve Farfetch's Information Security framework.

• You have a degree in Computer Science, Information Security, or a related field.
• You have a background in software development or systems administration.
• You have more than 4 years of experience in a similar Information Security, GRC, Risk, or Compliance role.
• You have a good understanding of network protocols, design, and operations.
• You have working knowledge of Information Security principles, techniques, and technologies.
• You have experience with Information Security governance frameworks and standards, such as COBIT and ISO 27001.
• You have experience reviewing security policies and procedures, managing documentation, and performing gap analyses.
• You have a good understanding of risk assessment methodologies, such as OCTAVE and NIST SP 800-30.
• Certifications in Information Security, such as CRISC, CISA, CEH, or similar, are a plus.
• Experience with Data Privacy Impact Assessments (DPIAs) is a plus.
• Experience working on AI and Data Governance projects is a plus.
• You have strong English communication skills, both written and verbal.
• You're self-motivated, proactive, and comfortable working with minimal supervision

• Support the development, implementation, and continuous improvement of Farfetch's Information Security governance framework.
• Recommend and implement changes to strengthen security controls and reduce the risk of unauthorized access.
• Review, maintain, and audit Information Security policies, procedures, and related documentation.
• Monitor compliance with applicable legal, regulatory, and industry standards and requirements.
• Perform Information Security risk assessments and other security reviews, identifying gaps and supporting the definition of appropriate mitigation actions.
• Support audits, compliance assessments, and gap analyses across the Information Security landscape.
• Coordinate and monitor company-wide Information Security controls to help protect the integrity of Farfetch's assets.
• Contribute to increasing Information Security awareness across the business.
• Collaborate with internal stakeholders to ensure security risks, controls, policies, and compliance requirements are effectively managed.
• Contribute to Information Security initiatives involving areas such as Data Privacy, AI Governance, and Data Governance.

• Health insurance for the whole family, flexible working environment and well-being support and tools
• Extra days off, sabbatical program and days for you to give back for the community
• Training opportunities and free access to Udemy
• Flexible benefits program

Farfetch is an equal opportunities employer ensuring that all applicants are treated equally and fairly throughout our recruitment process.We are determined that no applicant experiences discrimination on the basis of sex, race, ethnicity, religion or belief, disability, age, gender identity, ancestry, sexual orientation, veteran status, marriage and civil partnership, pregnancy and maternity, or any other basis prohibited by applicable law.