Nearshore GRC Analyst – Cybersecurity & Compliance

Devoteam; Lisboa; On-site; EUR 55,000 - 90,000; Full time

Job summary

Devoteam is seeking a detail-oriented Cybersecurity GRC Analyst for the Group IT Headquarters in the Paris region (Levallois-Perret). You will bridge regulatory requirements and IT practices to ensure security compliance across 25 countries and 50+ entities.

You will support ISO 27001, NIS2, and DORA alignment, conduct risk assessments, manage third‑party risks, and help drive security by design across global projects and SaaS apps. English fluency is mandatory; French is a strong plus.

Qualifications

• 1–3+ years in Information Security, GRC or Security Auditing.
• Strong knowledge of ISO/IEC 27001, NIS2, DORA, GDPR.
• Experience with risk assessments and third‑party risk management.
• Familiarity with IAM/MFA, encryption, and SaaS security baselines.
• Fluency in English; French language skills are a plus.

Responsibilities

• Support the implementation, maintenance, and continuous improvement of the Group ISMS (ISO/IEC 27001) across the organization.
• Conduct risk assessments and gap analyses on systems and projects.
• Drive Third-Party Risk Management (TPRM) using tools like ServiceNow GRC, OneTrust, or BitSight.
• Champion Security by Design by reviewing IAM/MFA, data flows, and security controls during onboarding.
• Draft and maintain security policies, procedures, and baseline documentation.

Skills

GRC & InfoSec

Regulatory compliance

Risk assessment

Communication skills

Education

ISO 27001 Lead Auditor/Implementer

CIPP/E

CIPM

IT/Cybersecurity degree

Tools

ServiceNow GRC

OneTrust

BitSight

Job description

Devoteam is seeking a detail-oriented Cybersecurity GRC Analyst for the Group IT Headquarters in the Paris region (Levallois-Perret). You will bridge regulatory requirements and IT practices to ensure security compliance across 25 countries and 50+ entities.

You will support ISO 27001, NIS2, and DORA alignment, conduct risk assessments, manage third‑party risks, and help drive security by design across global projects and SaaS apps. English fluency is mandatory; French is a strong plus.