Cyber Risk & GRC Analyst — Vendor & Risk Oversight

Newcold-Advanced-Cold-Logistics-1; Breda; On-site; EUR 70,000 - 90,000; Full time

Benefits offered by this job

International environment

Growth opportunities

Competitive compensation

Job summary

NewCold is seeking a hands-on Cyber Risk Specialist to support risk assessments, supplier due diligence, and governance work in ISO 27001 and NIS2 contexts. You will own the risk register day-to-day, triage intake, and translate risk data into actionable leadership reporting.

The role is highly operational and requires experience running a risk register under time pressure, with strong communication across multinational stakeholders.

Qualifications

• 3–5 years in cyber security risk management, IT risk, or GRC in a regulated enterprise.
• Hands-on risk register ownership: articulation, scoring, treatment tracking, executive reporting.

Responsibilities

• Triaging intake and keeping the risk register up-to-date.
• Chasing evidence collection and validation for risk findings.
• Turning raw risk data into concise leadership reports with actionable insights.
• Collaborating with IT, procurement, and business stakeholders across regions.

Skills

Cyber risk management

Risk articulation

High-volume triage

Stakeholder management

Executive reporting

Education

CRISC certification

Tools

Archer

ServiceNow GRC

Jira

Monday.com

Job description

NewCold is seeking a hands-on Cyber Risk Specialist to support risk assessments, supplier due diligence, and governance work in ISO 27001 and NIS2 contexts. You will own the risk register day-to-day, triage intake, and translate risk data into actionable leadership reporting.

The role is highly operational and requires experience running a risk register under time pressure, with strong communication across multinational stakeholders.