Senior Cyber GRC Analyst — Automation & Risk

Cerebras; Ireland; On-site; EUR 90,000 - 130,000; Full time

Job summary

Cohesity is seeking a Cyber Governance & Risk Senior Analyst to advance security governance and risk programs. You will automate control monitoring, work with control owners, and drive evidence-based risk management across Cohesity's IT ecosystem.

You’ll partner with the security team to scale governance through automation, supporting ISMS and regulatory requirements while delivering measurable improvements in posture and compliance.

Qualifications

• 4+ years of experience in cybersecurity governance, risk, or compliance (GRC), with hands-on control assessment or monitoring.
• Experience building automation in a GRC, security, or compliance context — RPA, scripting, or agentic workflows with concrete examples.
• Working knowledge of at least two control frameworks (e.g., SOC 2, ISO 27001, NIST CSF) and how control evidence is produced.

Responsibilities

• Support Security Governance program maintenance (policy, standards, KPI/SLA).
• Support Cyber Risk program with findings intake and risk analysis.
• Identify governance and risk work that can be automated and build it using RPA and in-house GRC tooling.
• Measure control effectiveness against thresholds and surface drift.
• Codify control-effectiveness logic and evidence requirements.
• Collaborate with control owners to drive remediation and provide trusted evidence.

Skills

Cybersecurity governance

Risk management

Automation

GRC frameworks

Education

Bachelor's degree in Cybersecurity, Information Security, Risk Management, or related field

Tools

GRC tooling

Claude-like tooling

Job description

Cohesity is seeking a Cyber Governance & Risk Senior Analyst to advance security governance and risk programs. You will automate control monitoring, work with control owners, and drive evidence-based risk management across Cohesity's IT ecosystem.

You’ll partner with the security team to scale governance through automation, supporting ISMS and regulatory requirements while delivering measurable improvements in posture and compliance.