Cybersecurity Analyst GRC (m/f/d)

Location: Hybrid in Poing, Germany

Company

hirify.global Business Services GmbH provides shared services for the hirify.global Group in EMEA, supporting a global semiconductor products and services distribution business.

What you will do

• Lead cybersecurity risk assessments and organization-wide risk management activities.
• Manage third-party cyber risk assessments and supplier security reviews.
• Support and lead SOX, audit, compliance, and customer security assessment activities.
• Develop and improve cybersecurity policies, standards, governance processes, reporting, dashboards, and metrics.
• Monitor remediation efforts and validate the effectiveness of security controls.
• Mentor Analyst I and Analyst II team members and collaborate with IT, Information Security, Legal, Privacy, Audit, Procurement, and business stakeholders.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, or a related field, or equivalent professional experience.
• At least 5 years of experience in cybersecurity, GRC, risk management, compliance, IT audit, information security, or third-party risk management.
• Experience leading risk assessments, audits, compliance reviews, or security governance initiatives.
• Strong understanding of cybersecurity controls, regulatory requirements, and risk management frameworks.
• Excellent communication, presentation, stakeholder management, analytical, organizational, and problem-solving skills.
• Ability to work effectively in a global, cross-functional environment and manage multiple priorities.

Nice to have

• Experience with SOX, NIST, ISO 27001, PCI DSS, SOC, privacy frameworks, or customer security assessments.
• Experience with GRC platforms such as AuditBoard, ServiceNow, OnSpring, or similar tools.
• Mentoring, team lead, or supervisory experience.
• Certifications such as CISSP, CISM, CRISC, or CISA.

Culture & Benefits

• Collaborative and inclusive environment with professional growth and leadership development opportunities.
• 30 days of annual vacation plus additional special leave days.
• Paid company holidays on December 24 and December 31.
• Flexible and mobile working options, including up to 10 workation days per year from selected locations.
• 38.5-hour work week with a flexible working time account.
• Supplemental health insurance, group accident insurance, company pension support, wellbeing membership, bicycle leasing, employee assistance, and on-site childcare.