Security GRC Analyst: Lead Risk, Compliance & Controls

Sinch; Stockholms kommun; On-site; SEK 446,000 - 614,000; Full time

Job summary

Sinch is seeking a Security GRC Analyst to strengthen the GRC program, building and maintaining policies, standards, and controls across the organization.

You will run risk assessments, monitor controls, support audits and RFx responses, and collaborate with IT, Product, HR, Legal, and other teams. English is required; Swedish work authorization is assumed. This role offers growth in a fast-growing company with a collaborative environment.

Qualifications

• 5+ years of experience in information security, cybersecurity, GRC, or a related field.
• Degree in Information Security, IT, or a related field.
• CISSP, CISA, CISM, or CompTIA Security+ are advantageous.
• Demonstrated experience implementing information security programs, policies, and controls.
• Strong knowledge of information security frameworks and standards including ISO 27001, CIS Controls, and NIST.
• Good understanding of current information security threats, trends, and regulatory developments.
• Strong communication and collaboration skills across technical and non-technical teams.
• Ability to work independently and take ownership to drive results.
• Willingness to learn and continuously develop knowledge and skills.

Responsibilities

• Support the implementation and continuous improvement of the Information Security Program, including policies, standards, and procedures.
• Monitor and assess the effectiveness of security controls and recommend improvements.
• Conduct information security risk assessments and support the implementation of appropriate controls.
• Stay current with emerging information security threats, trends, technologies, and industry practices.
• Support compliance with security frameworks and standards, including ISO 27001, CIS Controls, and NIST.
• Collaborate with IT, Products, HR, Legal, and other teams to integrate information security into processes.
• Support customer security activities, including RFx responses, audits, assessments, and security questionnaires.
• Support compliance with applicable information security regulations, including CRA, NIS2, and other regional requirements.
• Share key audit findings with stakeholders and leadership.
• Review business processes and maintain clear policies and documentation to support compliance and efficiency.
• Promote security awareness across the organization and act as a trusted partner in strengthening Sinch’s security posture.

Skills

Information security

GRC

Risk assessment

ISO 27001

Education

Degree in Information Security / IT

Job description

Sinch is seeking a Security GRC Analyst to strengthen the GRC program, building and maintaining policies, standards, and controls across the organization.

You will run risk assessments, monitor controls, support audits and RFx responses, and collaborate with IT, Product, HR, Legal, and other teams. English is required; Swedish work authorization is assumed. This role offers growth in a fast-growing company with a collaborative environment.