GRC Data & Audit Insights Analyst (Hybrid)

CSC; Amsterdam; Hybrid; EUR 45,000 - 80,000; Full time

Job summary

CSC is seeking a Cybersecurity GRC Data and Reporting Analyst to manage data, controls, and audit evidence within the GRC platform. You will consolidate data from multiple sources, validate submissions, and produce dashboards and management reports for SOC 1/2, ISAE 3402, and ISO 27001 audits.

The role emphasizes turning complex technical risks into actionable business insights, maintaining data dictionaries, and automating data collection and reporting processes across global teams.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, MIS, Data Analytics or related field (or equivalent experience).
• 2 to 4 years of experience in data analytics, business intelligence, technology reporting, GRC data management, IT audit, risk management, or cybersecurity.
• Demonstrated experience in data collection, cleansing, mapping, transformation, validation, reconciliation, analysis, and reporting.
• Strong spreadsheet and data-manipulation skills;
• Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA, PCI, PSD2 and NIST.
• Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT).
• Knowledge of modern technologies including cloud, DevOps, application security, and AI.
• Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent).
• Strong analytical, communication, and problem‑solving skills.
• Proactive approach towards available work requests and timely response.
• Ability to translate technical risks into business insights.

Responsibilities

• Collect, consolidate, cleanse, map, and analyze technology risk, compliance, control, evidence, issue, and audit data.
• Translate complex datasets and technical risks into clear, actionable business insights.
• Define and document data attributes, ownership, source systems, formats, validation rules, and reporting requirements.
• Validate data for accuracy, completeness, consistency, relevance, timelines and appropriate approval.
• Perform post-upload validation and reconcile GRC records against approved source data.
• Maintain data dictionaries, data mappings, reporting definitions, evidence standards, and audit records.
• Identify opportunities to standardize and automate data collection, validation, reconciliation, reporting, and evidence tracking.
• Leverage GRC and reporting tools for data management, audit tracking, dashboards, and management reporting.
• Partner with global teams across Technology, Cybersecurity, Risk, Compliance, Legal, Internal Audit, and business operations.
• Support internal, external, and jurisdictional IT audits by coordinating evidence requests, walkthroughs, deadlines, and stakeholder communications.
• Track audit requests, findings, remediation actions, auditor feedback, and regulatory deliverables.
• Collect audit evidence from control owners and validate its accuracy, completeness, relevance, and approval before submission.
• Conduct pre‑audit readiness assessments to identify control, documentation, and evidence gaps before formal testing.
• Work with business and technology owners to obtain corrected or remediated evidence.
• Improve IT compliance processes and identify automation opportunities for control activities.
• Maintain and enhance control frameworks aligned with regulatory and industry standards.
• Track and report compliance metrics and program effectiveness indicators.
• Respond to regulatory and jurisdictional requests for technology risk, control, and audit data.

Skills

Data analytics

GRC data management

IT audit support

Cybersecurity knowledge

Regulatory frameworks

Data visualization

Business insights

Analytical thinking

Communication skills

Problem solving

Education

Bachelor's degree in Computer Science/Information Technology/MIS/Data Analytics

Tools

Power BI

Archer

OneTrust

AuditBoard

Diligent

Job description

CSC is seeking a Cybersecurity GRC Data and Reporting Analyst to manage data, controls, and audit evidence within the GRC platform. You will consolidate data from multiple sources, validate submissions, and produce dashboards and management reports for SOC 1/2, ISAE 3402, and ISO 27001 audits.

The role emphasizes turning complex technical risks into actionable business insights, maintaining data dictionaries, and automating data collection and reporting processes across global teams.