Hands-On Cyber Risk & GRC Analyst

NewCold; Breda; On-site; EUR 70,000 - 110,000; Full time

Job summary

NewCold's cyber risk function is scaling fast. This hands-on role focuses on triaging intake, maintaining the risk register day-to-day, chasing evidence, and turning raw risk data into actionable reports for leadership.

You will own risk articulation, scoring, and due diligence for suppliers, handling high-volume triage under time pressure, and collaborating with engineers, procurement, IT, and business leaders across regions to drive timely risk closure.

Qualifications

• 3-5 years in cyber security risk management, IT risk, or GRC in regulated/complex environments.
• Hands-on risk register ownership: articulation, scoring, treatment tracking, executive-ready reporting.
• Supplier/third-party risk assessment: due diligence, evidence review, posture evaluation, volume.
• High-volume triage: prioritise intake queue by risk and business impact without slips.
• Experience mapping controls to risk outcomes using ISO/IEC 27001/27002, NIST CSF or CIS Controls.

Responsibilities

• Triaging intake and maintaining the risk register day-to-day.
• Running supplier/third-party risk assessments and due diligence at volume.
• Turning raw risk data into executive-ready reports for leadership.
• Collaborating with engineers, procurement, IT and business stakeholders across regions to ensure items close out.

Skills

Cyber security risk management

Risk articulation & reporting

Third-party risk assessment

High-volume triage

Frameworks knowledge (ISO 27001/NIST/C

Stakeholder communication

Education

CRISC certification

Tools

Archer

ServiceNow GRC

Jira

Monday.com

Job description

NewCold's cyber risk function is scaling fast. This hands-on role focuses on triaging intake, maintaining the risk register day-to-day, chasing evidence, and turning raw risk data into actionable reports for leadership.

You will own risk articulation, scoring, and due diligence for suppliers, handling high-volume triage under time pressure, and collaborating with engineers, procurement, IT, and business leaders across regions to drive timely risk closure.