Cybersecurity Analyst - Audit

CSC; Amsterdam; Hybrid; EUR 45,000 - 80,000; Full time

Job summary

CSC is seeking a Cybersecurity GRC Data and Reporting Analyst to manage data, controls, and audit evidence within the GRC platform. You will consolidate data from multiple sources, validate submissions, and produce dashboards and management reports for SOC 1/2, ISAE 3402, and ISO 27001 audits.

The role emphasizes turning complex technical risks into actionable business insights, maintaining data dictionaries, and automating data collection and reporting processes across global teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, MIS, Data Analytics or related field (or equivalent experience).
• 2 to 4 years of experience in data analytics, business intelligence, technology reporting, GRC data management, IT audit, risk management, or cybersecurity.
• Demonstrated experience in data collection, cleansing, mapping, transformation, validation, reconciliation, analysis, and reporting.
• Strong spreadsheet and data-manipulation skills;
• Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA, PCI, PSD2 and NIST.
• Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT).
• Knowledge of modern technologies including cloud, DevOps, application security, and AI.
• Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent).
• Strong analytical, communication, and problem‑solving skills.
• Proactive approach towards available work requests and timely response.
• Ability to translate technical risks into business insights.

Responsibilities

• Collect, consolidate, cleanse, map, and analyze technology risk, compliance, control, evidence, issue, and audit data.
• Translate complex datasets and technical risks into clear, actionable business insights.
• Define and document data attributes, ownership, source systems, formats, validation rules, and reporting requirements.
• Validate data for accuracy, completeness, consistency, relevance, timelines and appropriate approval.
• Perform post-upload validation and reconcile GRC records against approved source data.
• Maintain data dictionaries, data mappings, reporting definitions, evidence standards, and audit records.
• Identify opportunities to standardize and automate data collection, validation, reconciliation, reporting, and evidence tracking.
• Leverage GRC and reporting tools for data management, audit tracking, dashboards, and management reporting.
• Partner with global teams across Technology, Cybersecurity, Risk, Compliance, Legal, Internal Audit, and business operations.
• Support internal, external, and jurisdictional IT audits by coordinating evidence requests, walkthroughs, deadlines, and stakeholder communications.
• Track audit requests, findings, remediation actions, auditor feedback, and regulatory deliverables.
• Collect audit evidence from control owners and validate its accuracy, completeness, relevance, and approval before submission.
• Conduct pre‑audit readiness assessments to identify control, documentation, and evidence gaps before formal testing.
• Work with business and technology owners to obtain corrected or remediated evidence.
• Improve IT compliance processes and identify automation opportunities for control activities.
• Maintain and enhance control frameworks aligned with regulatory and industry standards.
• Track and report compliance metrics and program effectiveness indicators.
• Respond to regulatory and jurisdictional requests for technology risk, control, and audit data.

Skills

Data analytics

GRC data management

IT audit support

Cybersecurity knowledge

Regulatory frameworks

Data visualization

Business insights

Analytical thinking

Communication skills

Problem solving

Education

Bachelor's degree in Computer Science/Information Technology/MIS/Data Analytics

Tools

Power BI

Archer

OneTrust

AuditBoard

Diligent

Job description

Hybrid (3 days onsite)

Position Summary

We are seeking a Cybersecurity GRC Data and Reporting Analyst to manage the preparation, analysis, validation, and maintenance of technology controls, compliance and audit data within the organization’s GRC platform.

Operating within the first line of defense, this role consolidates data from approved business and technology sources and transforms it into accurate, consistent, and actionable information in the GRC platform. The Data Analyst will maintain datasets, dashboards, metrics, data dictionaries, and management reports while identifying opportunities to improve data quality, standardize reporting, and automate manual processes.

The role will also support Information Technology audits and regulatory examinations, including SOC 1, SOC 2, ISAE 3402, and ISO 27001. Responsibilities include coordinating data and evidence requests, validating submissions, maintaining audit records, monitoring deliverables, supporting remediation, and conducting pre‑audit readiness assessments.

The role works closely with auditors, control owners, technology teams, and business stakeholders. The ideal candidate has two to four years of experience in data analytics, business intelligence, GRC data management, cybersecurity, technology risk, compliance, or IT audit support.

• Collect, consolidate, cleanse, map, and analyze technology risk, compliance, control, evidence, issue, and audit data.
• Translate complex datasets and technical risks into clear, actionable business insights.
• Define and document data attributes, ownership, source systems, formats, validation rules, and reporting requirements.
• Validate data for accuracy, completeness, consistency, relevance, timelines and appropriate approval.
• Perform post‑upload validation and reconcile GRC records against approved source data.
• Maintain data dictionaries, data mappings, reporting definitions, evidence standards, and audit records.
• Identify opportunities to standardize and automate data collection, validation, reconciliation, reporting, and evidence tracking.
• Identify opportunities to automate and standardize data collection, validation, reconciliation, reporting, and evidence tracking.
• Leverage GRC and reporting tools for data management, audit tracking, dashboards, and management reporting.
• Partner with global teams across Technology, Cybersecurity, Risk, Compliance, Legal, Internal Audit, and business operations.
• Support internal, external, and jurisdictional IT audits by coordinating evidence requests, walkthroughs, deadlines, and stakeholder communications.
• Track audit requests, findings, remediation actions, auditor feedback, and regulatory deliverables.
• Collect audit evidence from control owners and validate its accuracy, completeness, relevance, and approval before submission.
• Conduct pre‑audit readiness assessments to identify control, documentation, and evidence gaps before formal testing.
• Work with business and technology owners to obtain corrected or remediated evidence.
• Improve IT compliance processes and identify automation opportunities for control activities.
• Maintain and enhance control frameworks aligned with regulatory and industry standards.
• Track and report compliance metrics and program effectiveness indicators.
• Respond to regulatory and jurisdictional requests for technology risk, control, and audit data.

Qualification and Core Skills

• Bachelor’s degree in Computer Science, Information Technology, MIS, Data Analytics or related field (or equivalent experience).
• 2 to 4 years of experience in data analytics, business intelligence, technology reporting, GRC data management, IT audit, risk management, or cybersecurity.
• Demonstrated experience in data collection, cleansing, mapping, transformation, validation, reconciliation, analysis, and reporting.
• Strong spreadsheet and data‑manipulation skills;
• Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA, PCI, PSD2 and NIST.
• Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT).
• Knowledge of modern technologies including cloud, DevOps, application security, and AI.
• Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent).
• Strong analytical, communication, and problem‑solving skills.
• Proactive approach towards available work requests and timely response.
• Ability to translate technical risks into business insights.

Additional Qualifications

• Hands‑on experience in IT disciplines and audit execution.
• Experience in global and multi‑regulatory environments.
• Strong attention to detail and commitment to data accuracy and integrity.
• Ability to manage complex compliance requirements across jurisdictions.
• Strong organizational and proactive risk management skills.
• High integrity, accountability, and professional excellence.

Certification Requirements

• Data analytics, Power BI, business intelligence, data management, or GRC‑platform certifications.
• CISSP, CISM, CRISC, CISA, CIA, or other relevant cybersecurity, audit, or risk certifications.

At CSC, compensation depends on several factors, including job location and the knowledge and experience of each individual. A reasonable estimate of the current range is €45,000 - €80,000.