Compliance Analyst (GRC)

TL;DR

Compliance Analyst (GRC): Managing security governance and compliance initiatives with an accent on GRC frameworks, audit coordination, and third-party risk management. Focus on optimizing security controls, performing vendor due diligence, and ensuring adherence to ISO 27001 and SOC 2 standards.

Location: Hybrid in Lisbon, Portugal

Company

A leader in Vertical AI SaaS providing intelligence-applied solutions to professional and financial services firms globally.

What you will do

• Coordinate security governance and compliance projects, including managing external audits.
• Review and maintain security policies, processes, and controls to ensure ongoing compliance.
• Perform third-party risk assessments, vendor due diligence, and contract security reviews.
• Manage user access reviews and support identity and access governance activities.
• Respond to security questionnaires from customers and prospects.
• Utilize GRC platforms such as Optro (TPRM and CrossComply) and the Microsoft security ecosystem.

Requirements

• 3–5 years of experience in security compliance, governance, risk, or a related information security role.
• Must be based in Lisbon, Portugal to support a hybrid work model.
• Experience with security frameworks and certifications such as ISO 27001 or SOC 2.
• Proven ability to manage security projects independently and prioritize competing tasks.
• Strong stakeholder management skills to collaborate across technical and non-technical teams.
• Solid technical understanding of information security concepts and risk management principles.

Nice to have

• Hands-on experience with Optro, specifically the TPRM and CrossComply modules.
• Experience with Microsoft security tools.

Culture & Benefits

• Hybrid work system with agile and flexible hours.
• Competitive compensation including base pay, performance-based variable pay, and equity/stock.
• Comprehensive leave package including paid parental, marriage, bereavement, and carer's leave.
• Meal allowance and a one-time home office stipend.
• Reimbursement for continuing education and professional training.
• Modern office facility located within walking distance of Gare do Oriente.