TL;DR

Security GRC Analyst: Strengthening global physical security governance, risk, and compliance programs by developing controls, policies, and regulatory tracking systems. Focus on conducting risk assessments, supporting audits, and collaborating cross-functionally to ensure a safe and auditable security environment.

What you will do

Conduct and support physical security risk assessments and control gap analyses (e.g., ISO 27001)
Draft, maintain, and review security governance documents such as policies, standards, and procedures
Track and monitor compliance obligations across regions including GDPR, ISO 22301, and ISO 27001
Prepare for and support internal and external audits by gathering evidence and coordinating stakeholders
Monitor regulatory developments and evolving industry standards related to physical and information security
Assist in developing business continuity and resilience documentation alongside Legal and Operations teams
Build reports and dashboards to communicate compliance status and GRC metrics to leadership
Collaborate on process improvement initiatives and risk mitigation plans

Requirements

2+ years of experience in risk, compliance, or security analyst roles
Understanding of GRC principles including policies, risk assessments, and compliance tracking
Familiarity with standards and frameworks such as ISO 27001, ISO 22301, GDPR, and NIST
Proficiency in Google Sheets/Excel for documentation, data tracking, and reporting
Awareness of IT systems, cybersecurity principles, and physical security controls
Excellent writing skills for policies, reports, and stakeholder communications
Impeccable attention to detail and great organizational skills
Self-motivated, analytical mindset with a proactive approach to learning and problem-solving

Nice to have

Exposure to GRC software platforms like LogicManager, Archer, or ServiceNow GRC
Experience with client assurance, due diligence, or responding to security questionnaires
Knowledge of physical security systems such as access control, CCTV, and incident tracking
Familiarity with project management basics or cross-functional collaboration experience
Understanding of IT disaster recovery and business continuity planning
Certifications such as CompTIA Security+, ISO 27001 Foundation, CBCI, or CISA

Culture & Benefits

Certified Great Place to Work™ with a focus on employee experience
Multicultural and diverse team environment encouraging inclusion
Remote and office work options globally
Commitment to diversity and inclusion through dedicated frameworks