Cyber Risk & GRC Analyst — Risk Register Lead

NewCold; Netherlands; Remote; EUR 60,000 - 90,000; Full time

Job summary

NewCold seeks a hands-on Cyber Risk Specialist to scale our risk governance as part of a fast-growing, multinational team. You will own the risk register, perform supplier due diligence, and convert raw data into actionable leadership reports.

In a high-volume, time-pressured environment, you’ll coordinate with IT, procurement, and engineering stakeholders across regions to close risk items and maintain current, accurate risk posture.

Qualifications

• 3–5 years in cyber security risk management, IT risk, or GRC in a regulated or complex enterprise environment.
• Hands-on risk register ownership: risk articulation, scoring, treatment tracking, and producing executive-ready reporting.
• Supplier/third-party risk assessment execution: questionnaire-based due diligence, evidence review, and posture evaluation, done independently and at volume.
• High-volume triage: prioritize a busy intake queue based on risk and business impact, without items slipping.
• Working knowledge of ISO/IEC 27001/27002, NIST CSF, or CIS Controls and mapping control evidence to risk outcomes.
• Excellent written and verbal communication skills with stakeholders across technical, engineers to senior leaders.
• Comfortable operating across cultures in a multinational footprint and driving follow-through with diverse stakeholders.
• Experience chasing technical teams, procurement, IT, and business stakeholders until items close out.

Responsibilities

• Triaging intake, running the risk register day-to-day.
• Chasing evidence collection and turning raw risk data into leadership-ready reporting.
• Maintain and improve risk register with timely scoring and risk treatment tracking.
• Coordinate supplier/third-party risk assessments and ensure consistent evidence review and posture evaluation.

Skills

Cyber risk management

Risk register ownership

Third-party risk assessment

High-volume triage

Security frameworks

Stakeholder comms

Cross-cultural collaboration

Stakeholder follow-through

Tools

ServiceNow GRC

Jira

Archer

Monday.com

Job description

NewCold seeks a hands-on Cyber Risk Specialist to scale our risk governance as part of a fast-growing, multinational team. You will own the risk register, perform supplier due diligence, and convert raw data into actionable leadership reports.

In a high-volume, time-pressured environment, you’ll coordinate with IT, procurement, and engineering stakeholders across regions to close risk items and maintain current, accurate risk posture.