Compliance & InfoSec Analyst: Drive Trust in SaaS

beqom; Dundrum; On-site; EUR 70,000 - 110,000; Full time

Job summary

beqom is seeking an experienced Compliance & Information Security Analyst to own the compliance and third-party risk management program. This hands-on role sits at the intersection of information security, legal/contractual review, and vendor risk management.

You will be the primary contact for inbound GRC requests, manage due diligence for vendors and subcontractors, and review information security obligations in client contracts to maintain trust and support sales cycles.

Qualifications

• Experience in compliance, information security, GRC, or vendor risk management.
• Experience completing complex security questionnaires (SIG, CAIQ etc.) and compiling evidence.
• Familiarity with ISO/IEC 27001, SOC 2, NIST CSF, CIS Controls, GDPR.
• Experience reviewing security provisions in MSAs/DPAs and SaaS contracts.
• Strong organizational skills and ability to manage multiple workstreams to meet deadlines.
• Excellent written and verbal communication for non-technical audiences.

Responsibilities

• Triage inbound GRC/security questionnaires from clients and prospects.
• Develop and maintain a master response library for questionnaires.
• Coordinate with Engineering, Product, Operations and Legal for evidence and documentation.
• Track questionnaire status, deadlines, and blockers; maintain central log.
• Engage client procurement, risk and security contacts for ongoing TPRM obligations.
• Review MSAs and client contracts for information security obligations and gaps.
• Maintain vendor risk register and due diligence logs; ensure timely remediation.
• Report vendor risk posture to internal stakeholders on a regular cadence.

Skills

GRC

InfoSec

Vendor risk

Documentation

Stakeholder mgmt

Contract review

SOC 2

ISO 27001

Tools

OneTrust

Vanta

SecurityScorecard

Job description

beqom is seeking an experienced Compliance & Information Security Analyst to own the compliance and third-party risk management program. This hands-on role sits at the intersection of information security, legal/contractual review, and vendor risk management.

You will be the primary contact for inbound GRC requests, manage due diligence for vendors and subcontractors, and review information security obligations in client contracts to maintain trust and support sales cycles.