Cyber Risk & GRC Analyst

Newcold-Advanced-Cold-Logistics-1; Breda; On-site; EUR 70,000 - 90,000; Full time

Benefits offered by this job

International environment

Growth opportunities

Competitive compensation

Job summary

NewCold is seeking a hands-on Cyber Risk Specialist to support risk assessments, supplier due diligence, and governance work in ISO 27001 and NIS2 contexts. You will own the risk register day-to-day, triage intake, and translate risk data into actionable leadership reporting.

The role is highly operational and requires experience running a risk register under time pressure, with strong communication across multinational stakeholders.

Qualifications

• 3–5 years in cyber security risk management, IT risk, or GRC in a regulated enterprise.
• Hands-on risk register ownership: articulation, scoring, treatment tracking, executive reporting.

Responsibilities

• Triaging intake and keeping the risk register up-to-date.
• Chasing evidence collection and validation for risk findings.
• Turning raw risk data into concise leadership reports with actionable insights.
• Collaborating with IT, procurement, and business stakeholders across regions.

Skills

Cyber risk management

Risk articulation

High-volume triage

Stakeholder management

Executive reporting

Education

CRISC certification

Tools

Archer

ServiceNow GRC

Jira

Monday.com

Job description

NewCold is a global leader in advanced food logistics. Our warehousesand transport network sit at the center of the food supply chain. Connectingthe world’s major food manufacturers with retailers and food service providers.

Our goal is to keep the world’s food fresh and safe with our proprietarytechnologies and innovative solutions.

NewCold designs, builds, and operates state-of-the-art cold storagefacilities that are highly automated. We push the boundaries of logistics with end-to-endstorage and transport operations that add greater resilience, efficiency, andsustainability to supply chains on four continents. And we are growing rapidly.

To support our rapid growth, we’re constantly looking for talentedpeople to join our team. Want to be a part of a dynamic, forward-thinkingenvironment? Join us!

About the role:

NewCold's cyber risk function isscaling fast: risk assessments, supplier due diligence, and (ISO 27001 and NIS2-drivengovernance work have grown to a volume that needs a dedicated person to providethe right level of focus.

This role exists to keep thatpipeline moving: triaging intake, running the risk register day-to-day, chasingevidence collection, and turning raw risk data into reporting that leadershipcan act on. It's a hands-on, high-throughput role rather than a strategic orpolicy-setting one.

We're looking for someone who'sactually run a risk register under time pressure, not just someone who can talkfluently about frameworks.

Must-have experience:

• 3–5 years in cyber security risk management, IT risk, or GRC, in a regulated or complex enterprise environment.
• Hands-on risk register ownership: risk articulation, scoring, treatment tracking, and producing executive-ready reporting.
• Supplier/third-party risk assessment execution: questionnaire-based due diligence, evidence review, and posture evaluation, done independently and at volume.
• High-volume triage: proven ability to prioritize a busy intake queue based on risk and business impact, without things slipping.
• Working knowledge and experience with frameworks such as: ISO/IEC 27001/27002, NIST CSF, or CIS Controls with the ability to map control evidence to risk outcomes.
• Communication & cross-cultural stakeholder skills: strong written and verbal communication skills, with the ability to adapt tone and approach across internal and external stakeholders, from technical engineers to senior business leaders to third-party suppliers.
• Comfortable operating across cultures and communication styles given NewCold's multinational footprint, and able to build trust and drive follow-through with stakeholders from different regional and organisational backgrounds.
• Stakeholder follow-through: comfortable chasing technical teams, procurement, IT, and business stakeholders repeatedly until items close out.

Preferred / nice-to-have:

• Exposure to supplier tiering, criticality assessment, or ongoing supplier monitoring models.
• Familiarity with OT/industrial risk concepts (e.g. IEC 62443, Purdue model) would be a plus given NewCold's OT environment.
• Certified in Risk and Information Systems Control (CRISC).
• Experience with GRC or workflow tooling (e.g. Archer, ServiceNow GRC, Jira, Monday.com or equivalent).
• Prior experience operating across multiple regions/time zones.
• Understanding of risk governance concepts: risk appetite, residual risk, risk acceptance, escalation paths.

How success looks like in the first 6 months:

• Risk register is current, accurately scored, and reporting cadence is reliable without prompting.
• Supplier risk assessment backlog is under control, with clear tiering and a repeatable evidence-review process.
• Stakeholders across regions know who to go to and trust the follow-up will happen.

Whyjoin NewCold?

At NewCold, our people are our most valuable asset. We take pride in ourteam-oriented culture, where innovation and collaboration are at the heart ofeverything we do.

What we offer:

• A supportive and collaborative environment.
• The opportunity for professional growth in a fast-scaling, international company.
• The chance to have real impact and innovate alongside other bright minds.
• The challenge of transforming the future of cold storage and food logistics.
• A strong commitment to employee well-being.

Whether you’re a seasoned expert or just starting your career, NewColdprovides the opportunities and challenges that allow you to grow and excel.Ready to turn your curiosity into impact?