Security GRC Analyst

Sinch; Stockholms kommun; On-site; SEK 446,000 - 614,000; Full time

Job summary

Sinch is seeking a Security GRC Analyst to strengthen the GRC program, building and maintaining policies, standards, and controls across the organization.

You will run risk assessments, monitor controls, support audits and RFx responses, and collaborate with IT, Product, HR, Legal, and other teams. English is required; Swedish work authorization is assumed. This role offers growth in a fast-growing company with a collaborative environment.

Qualifications

• 5+ years of experience in information security, cybersecurity, GRC, or a related field.
• Degree in Information Security, IT, or a related field.
• CISSP, CISA, CISM, or CompTIA Security+ are advantageous.
• Demonstrated experience implementing information security programs, policies, and controls.
• Strong knowledge of information security frameworks and standards including ISO 27001, CIS Controls, and NIST.
• Good understanding of current information security threats, trends, and regulatory developments.
• Strong communication and collaboration skills across technical and non-technical teams.
• Ability to work independently and take ownership to drive results.
• Willingness to learn and continuously develop knowledge and skills.

Responsibilities

• Support the implementation and continuous improvement of the Information Security Program, including policies, standards, and procedures.
• Monitor and assess the effectiveness of security controls and recommend improvements.
• Conduct information security risk assessments and support the implementation of appropriate controls.
• Stay current with emerging information security threats, trends, technologies, and industry practices.
• Support compliance with security frameworks and standards, including ISO 27001, CIS Controls, and NIST.
• Collaborate with IT, Products, HR, Legal, and other teams to integrate information security into processes.
• Support customer security activities, including RFx responses, audits, assessments, and security questionnaires.
• Support compliance with applicable information security regulations, including CRA, NIS2, and other regional requirements.
• Share key audit findings with stakeholders and leadership.
• Review business processes and maintain clear policies and documentation to support compliance and efficiency.
• Promote security awareness across the organization and act as a trusted partner in strengthening Sinch’s security posture.

Skills

Information security

GRC

Risk assessment

ISO 27001

Education

Degree in Information Security / IT

Job description

Sinch is pioneering the way the world communicates. More than 150,000 businesses — including Google, Uber, PayPal, Visa, Tinder, and many others — rely on Sinch’s Customer Communications Cloud to power engaging customer experiences through mobile messaging, voice, and email.

Whether you need to verify users or craft omnichannel campaigns, Sinch makes it easy. Our AI-infused Super Network, APIs, and applications ensure you can connect with your customers reliably and securely, at every step of their journey.

At Sinch we “Dream Big”, “Win Together”, “Keep it simple”, and “Make it Happen”. These values are our foundation!

About the role

Sinch is looking for a Security GRC Analyst (Governance, Risk & Compliance) to help strengthen and evolve our GRC function. You’ll work on building and maintaining our cybersecurity program, running risk assessments, implementing and maintaining the organization's information security program and policies.

We’re seeking someone who’s curious, proactive, and comfortable working independently. A genuine interest in security, risk and compliance will take you far in this role.

Key Responsibilities

• Support the implementation and continuous improvement of the Information Security Program, including policies, standards, and procedures.
• Monitor and assess the effectiveness of security controls and recommend improvements.
• Conduct information security risk assessments and support the implementation of appropriate controls to protect sensitive information.
• Stay current with emerging information security threats, trends, technologies, and industry practices.
• Support compliance with security frameworks and standards, including ISO 27001, CIS Controls, and NIST.
• Collaborate with teams across the organization, including IT, Products, HR, Legal, and other business functions, to integrate information security into processes and ways of working.
• Support customer security activities, including RFx responses, audits, assessments, and security questionnaires.
• Support compliance with applicable information security and cybersecurity regulations, including IMDA, Ofcom, NIS2, and the Cyber Resilience Act (CRA).
• Share key audit findings with stakeholders and leadership.
• Review business processes and maintain clear policies and documentation to support compliance and efficiency.
• Promote awareness of compliance and information security across the organization
• Act as a trusted partner in strengthening Sinch’s security posture.

About you

• 5+ years of experience in information security, cybersecurity, GRC, or a related field.
• Degree in Information Security, IT, or a related field, or equivalent relevant professional experience.
• Relevant professional certifications, such as CISSP, CISA, CISM, or CompTIA Security+, are considered an advantage.
• Demonstrated experience in implementing and supporting information security programs, policies, and controls.
• Strong knowledge of information security frameworks, industry standards, and best practices, including ISO 27001, CIS Controls, and NIST.
• Good understanding of current information security threats, trends, technologies, and regulatory developments.
• Strong communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.
• Ability to work independently, take ownership of assigned activities, and drive work to completion.
• Strong willingness to learn and continuously develop knowledge and skills.

Our corporate language is English, please submit your application in English.

At Sinch, we value learning, embrace change, and offer opportunities for personal and professional growth. Unfortunately, we are not supporting relocation at this time.

Applicants must:

• Hold aSwedish or EU/EEA citizenship.
• Have a valid Swedish work permit.

About our hiring process

We are committed to ensuring a recruitment process that is fair, objective, consistent, and inclusive. Our approach includes structured, competency-based interviews designed to evaluate your skills, experience, and qualifications relevant to the role. At times, we may include a data-driven assessment to enhance our hiring success and identify candidates likely to excel.

We believe in a two-way process and encourage you to ask questions throughout the journey. If this role isn't what you're looking for, please explore the other opportunities listed on our career page:https://www.sinch.com/careers/. No matter who you are, we hope you find an exciting path forward - hopefully with us!

The monthly salary for this position ranges from 40,000 to 55,000 SEK. Factors which may affect pay within this range may include skills, education, experience, and other qualifications.