Назад
Company hidden
13 дней назад

Senior GRC Analyst (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
France
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior GRC Analyst (Cybersecurity): Strengthening governance, risk, and compliance practices across a global advertising technology organization with an accent on security controls, regulatory requirements, and audit readiness. Focus on performing risk assessments, supporting ISO/SOX and other audits, evaluating new technologies, and driving practical remediation with technical and business stakeholders.

Location: Paris, France; hybrid work with 2 remote days per week

Company

hirify.global is an omnichannel advertising platform using technology, data, and AI to connect global brands with premium publishers and audiences.

What you will do

  • Support the development, implementation, and maintenance of GRC frameworks, policies, procedures, and internal controls.
  • Perform risk assessments across internal processes, infrastructure, applications, tools, technologies, and third-party vendors.
  • Support internal and external audits, including SOX ITGC, ISO 27001/27017/27032, TISAX, and SOC 1.
  • Prepare audit evidence, customer security questionnaires, due diligence responses, and regulatory compliance documentation.
  • Track control weaknesses, audit findings, and remediation plans through resolution.
  • Collaborate with IT, Security, Engineering, Legal, Procurement, and business stakeholders to turn requirements into practical actions.

Requirements

  • Senior-level experience in a GRC role within a fast-paced, publicly traded, or large enterprise environment.
  • Deep understanding of IT and R&D operations, global compliance regulations, and corporate governance frameworks.
  • Experience representing and defending compliance, risk management, and security controls before auditors, regulators, and certification bodies.
  • Exceptional English communication skills and the ability to explain complex security and compliance requirements to technical and non-technical stakeholders.
  • Strong business-oriented, risk-based approach with the ability to influence stakeholders and independently drive initiatives to completion.

Nice to have

  • Experience with major organizational change or post-merger ecosystem scaling.
  • Certifications such as CISA, CRISC, CISSP, or CISM.
  • Combined enterprise legal/compliance expertise and technical infrastructure knowledge.

Culture & Benefits

  • Work in a global technology environment with colleagues across more than 30 countries.
  • Competitive compensation, profit-sharing, daily meal vouchers, family health insurance, and a relocation package if needed.
  • More than 35 days off per year, covered parental leave, and reserved daycare places.
  • Training, professional certifications, technology conferences, and internal mobility opportunities.
  • Premium work equipment, remote work subsidy, team events, sustainability initiatives, and diversity and inclusion programs.

Hiring process

  • Submit a CV in English.
  • Follow the recruitment process steps described by hirify.global.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →