Cyber Risk & GRC Analyst

NewCold; Netherlands; Remote; EUR 60,000 - 90,000; Full time

Job summary

NewCold seeks a hands-on Cyber Risk Specialist to scale our risk governance as part of a fast-growing, multinational team. You will own the risk register, perform supplier due diligence, and convert raw data into actionable leadership reports.

In a high-volume, time-pressured environment, you’ll coordinate with IT, procurement, and engineering stakeholders across regions to close risk items and maintain current, accurate risk posture.

Qualifications

• 3–5 years in cyber security risk management, IT risk, or GRC in a regulated or complex enterprise environment.
• Hands-on risk register ownership: risk articulation, scoring, treatment tracking, and producing executive-ready reporting.
• Supplier/third-party risk assessment execution: questionnaire-based due diligence, evidence review, and posture evaluation, done independently and at volume.
• High-volume triage: prioritize a busy intake queue based on risk and business impact, without items slipping.
• Working knowledge of ISO/IEC 27001/27002, NIST CSF, or CIS Controls and mapping control evidence to risk outcomes.
• Excellent written and verbal communication skills with stakeholders across technical, engineers to senior leaders.
• Comfortable operating across cultures in a multinational footprint and driving follow-through with diverse stakeholders.
• Experience chasing technical teams, procurement, IT, and business stakeholders until items close out.

Responsibilities

• Triaging intake, running the risk register day-to-day.
• Chasing evidence collection and turning raw risk data into leadership-ready reporting.
• Maintain and improve risk register with timely scoring and risk treatment tracking.
• Coordinate supplier/third-party risk assessments and ensure consistent evidence review and posture evaluation.

Skills

Cyber risk management

Risk register ownership

Third-party risk assessment

High-volume triage

Security frameworks

Stakeholder comms

Cross-cultural collaboration

Stakeholder follow-through

Tools

ServiceNow GRC

Jira

Archer

Monday.com

Job description

NewCold is a global leader in advanced food logistics. Our warehousesand transport network sit at the center of the food supply chain. Connectingthe world’s major food manufacturers with retailers and food service providers.

Our goal is to keep the world’s food fresh and safe with our proprietarytechnologies and innovative solutions.

NewCold designs, builds, and operates state-of-the-art cold storagefacilities that are highly automated. We push the boundaries of logistics with end-to-endstorage and transport operations that add greater resilience, efficiency, andsustainability to supply chains on four continents. And we are growing rapidly.

To support our rapid growth, we’re constantly looking for talentedpeople to join our team. Want to be a part of a dynamic, forward-thinkingenvironment? Join us!

About the role:

NewCold's cyber risk function isscaling fast: risk assessments, supplier due diligence, and (ISO 27001 and NIS2-drivengovernance work have grown to a volume that needs a dedicated person to providethe right level of focus.

This role exists to keep thatpipeline moving: triaging intake, running the risk register day-to-day, chasingevidence collection, and turning raw risk data into reporting that leadershipcan act on. It's a hands-on, high-throughput role rather than a strategic orpolicy-setting one.

We're looking for someone who'sactually run a risk register under time pressure, not just someone who can talkfluently about frameworks.

Must-have experience:

• 3–5 years in cyber security risk management, IT risk, or GRC, in a regulated or complex enterprise environment.
• Hands-on risk register ownership: risk articulation, scoring, treatment tracking, and producing executive-ready reporting.
• Supplier/third-party risk assessment execution: questionnaire-based due diligence, evidence review, and posture evaluation, done independently and at volume.
• High-volume triage: proven ability to prioritize a busy intake queue based on risk and business impact, without things slipping.
• Working knowledge and experience with frameworks such as: ISO/IEC 27001/27002, NIST CSF, or CIS Controls with the ability to map control evidence to risk outcomes.
• Communication & cross-cultural stakeholder skills: strong written and verbal communication skills, with the ability to adapt tone and approach across internal and external stakeholders, from technical engineers to senior business leaders to third-party suppliers.
• Comfortable operating across cultures and communication styles given NewCold's multinational footprint, and able to build trust and drive follow-through with stakeholders from different regional and organisational backgrounds.
• Stakeholder follow-through: comfortable chasing technical teams, procurement, IT, and business stakeholders repeatedly until items close out.

Preferred / nice-to-have:

• Exposure to supplier tiering, criticality assessment, or ongoing supplier monitoring models.
• Familiarity with OT/industrial risk concepts (e.g. IEC 62443, Purdue model) would be a plus given NewCold's OT environment.
• Certified in Risk and Information Systems Control (CRISC).
• Experience with GRC or workflow tooling (e.g. Archer, ServiceNow GRC, Jira, Monday.com or equivalent).
• Prior experience operating across multiple regions/time zones.
• Understanding of risk governance concepts: risk appetite, residual risk, risk acceptance, escalation paths.

How success looks like in the first 6 months:

• Risk register is current, accurately scored, and reporting cadence is reliable without prompting.
• Supplier risk assessment backlog is under control, with clear tiering and a repeatable evidence-review process.
• Stakeholders across regions know who to go to and trust the follow-up will happen.

Whyjoin NewCold?

At NewCold, our people are our most valuable asset. We take pride in ourteam-oriented culture, where innovation and collaboration are at the heart ofeverything we do.

What we offer:

• A supportive and collaborative environment.
• The opportunity for professional growth in a fast-scaling, international company.
• The chance to have real impact and innovate alongside other bright minds.
• The challenge of transforming the future of cold storage and food logistics.
• A strong commitment to employee well-being.

Whether you’re a seasoned expert or just starting your career, NewColdprovides the opportunities and challenges that allow you to grow and excel.Ready to turn your curiosity into impact?