19 дней назад
Senior Security GRC Analyst (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Security GRC Analyst (Cybersecurity): Evaluating security controls and driving regulatory compliance for enterprise email, data, e-commerce, and web-based systems with an accent on NIS2, GDPR, Cyber Resilience Act, ISO 27001, and NIST frameworks. Focus on translating regulatory requirements into security controls, conducting risk and compliance assessments, managing GRC solutions, and guiding remediation across business units.
Location: Brno, Czech Republic; work is associated with a modern workplace at Vlněna Office Park.
Company
develops smart solutions that help organizations, employees, customers, and partners work more effectively.
What you will do
- Evaluate and test the design and operational effectiveness of security controls, countermeasures, and defensive architectures across email, data, e-commerce, and web-based systems.
- Conduct gap assessments and compliance assurance against European and international cybersecurity regulations, including NIS2, GDPR, and the Cyber Resilience Act.
- Translate regulatory requirements into actionable internal security requirements and support remediation plans with business units.
- Manage company-wide web-enabled GRC solutions, documentation processes, department metrics, and continuous improvement initiatives.
- Prepare control matrices, narratives, flowcharts, segregation-of-duties analyses, application controls, assessment reports, and management reporting.
- Advise Information Security, IT, business units, Professional Services, and outsourcing functions on risks, control effectiveness, and improvement opportunities.
Requirements
- Bachelor’s degree required; an advanced degree is preferred.
- Approximately 8 years of experience in cybersecurity, GRC, IT audit, or regulatory assurance.
- Hands-on experience with risk and compliance assessments against ISO/IEC 27001, NIST CSF/800-53, NIS2, DORA, or GDPR.
- Experience implementing systems and tools, managing IT documentation processes, and project-managing IT solutions.
- Advanced analytical skills and demonstrated ability to identify and implement process improvements in a fast-paced environment.
- Relevant security certifications such as CRISC, CISM, CISSP, or CISA are preferred.
Culture & Benefits
- Five weeks of vacation, five paid sick days, and four paid volunteer days.
- Meal contribution, reduced-price Multisport card, and a monthly 1,000 CZK Benefit Plus cafeteria contribution.
- Training, personal development, internal learning resources, language courses, and internal career opportunities.
- Performance-based annual bonuses targeted at 12% of base pay, plus yearly salary increases based on individual performance.
- Life and pension insurance contribution, partner discounts, free beverages, and fruit days.
- Modern multifunctional workplace in the city centre.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
6 дней назад
Security and Compliance Manager (GRC)
8 дней назад
Solutions Consultant (Cybersecurity)
10 дней назад
Business Information Sr Security Manager
12 дней назад
Technical Program Manager, Application Security
6 дней назад
OT Security Architect (Lead)
8 дней назад