Junior Information Security Grc Analyst (F / m / d)

Awin; Milano; Remoto; EUR 35.000 - 50.000; Tempo pieno

Descrizione del lavoro

A dynamic technology company in Milan is looking for a candidate to support the InfoSec GRC team. The role involves conducting due diligence for third-party entities, reporting on compliance initiatives, and supporting ISO 27001 activities. The ideal candidate will have strong communication skills, experience with Microsoft tools, and a degree in security-related studies. Flexible working arrangements and training programs are offered.

Servizi

Company training programs

Remote working options

Peer-to-peer recognition vouchers

Free drinks and snacks

Support for mental wellbeing

Competenze

• Professional experience in the field of information security.
• Clear and concise written communication abilities.
• Excellent English skills, both verbal and written.

Mansioni

• Conduct thorough third-party due diligence and compliance reporting.
• Support ISO 27001 certification and ISMS activities.
• Develop security awareness materials to promote cybersecurity practices.

Conoscenze

ISO 27001 awareness

Understanding of GDPR

Awareness of PCI / DSS

Interest in Information Security

Proficiency in Microsoft Office Suite

Experience with Microsoft Teams

Experience with Asana

Experience with GRC software (OneTrust)

Formazione

Degree in Security-related studies

Security-related courses

Descrizione del lavoro

Purpose of Position

Assist the InfoSec GRC team by conducting thorough third-party due diligence, updating policies and processes, performing regular KPI reporting, and maintaining the security awareness program.

• Key Tasks
• Compile regular reports on assurance and compliance initiatives, including monthly Key Performance Indicators (KPIs).
• Contribute to the administration of the third-party risk management process.
• Participate in onboarding and conduct due diligence for third-party entities, assessing Awin's suppliers and partners.
• Address client audit requests systematically, highlighting failures and risks within a standardised framework.
• Enhance response efficiency to client audit requests by utilising and refining a Questionnaire Automation tool.
• Support ISO 27001 certification and ISMS activities, including internal and external audits.
• Develop Information Security Awareness materials, such as monthly newsletters, to promote cybersecurity practices.
• Skills & Expertise

Professional experience

• Awareness of ISO 27001.
• Understanding of GDPR.
• Awareness of PCI / DSS.
• Interest in Information Security topics and staying current with best practices.
• Proficiency in Microsoft Office Suite (essential).
• Experience with Microsoft Teams (essential).
• Experience with Asana (desirable).
• Experience with GRC software e.g., OneTrust (desirable).

Personal Skills

• Clear and concise written communication.
• Attention to detail.
• Adaptability and flexibility.
• Analytical thinking.
• Willingness to learn and expand security knowledge.
• Excellent English skills, both verbal and written.

Preferred Education

• Degree in Security-related studies.
• Security-related courses.
• Our Offer
• Utilize company training programs to enhance your knowledge on various topics.
• Work 4 days a week; the 5th day (agreed with your manager) can be used for training, development, or personal time, depending on team needs.
• Remote working options available.
• Participate in peer-to-peer recognition through vouchers.
• Access to free drinks and snacks, including coffee, tea, hot chocolate, and fresh fruit.
• Support for mental wellbeing through various initiatives.

Established in 2000, Awin is proud of our dynamic, social, and inclusive culture.

LI-MM1