Information Security Grc Analyst - Verisure

In this role you help safeguard IT and business processes by identifying, assessing, and mitigating cybersecurity risks. You will collaborate with the Cyber & IT Risk Team to implement risk controls, policies, and standards across the organization. You’ll document gaps, guide remediation, and support regulatory compliance (ISO27001, NIST, GDPR). You contribute to building a robust Audit function within Information Security and partner with cross-functional teams to drive secure, scalable practices. This is a chance to shape security governance in a growth-focused, technology-enabled company.

• Build and maintain the Information Security Audit function
• Manage and mature the IT risk control framework for effective operation and monitoring
• Document control gaps, provide remediation guidance, and drive mitigation projects
• Develop security policies, standards, and procedures for standardization of controls
• Perform risk assessments across IT and business processes and propose mitigations
• Ensure risk and remediation plans are addressed by owners
• Support regulatory compliance activities (ISO27001, NIST, GDPR)
• Audit and document processes and prepare management reports
• Bachelor’s degree in a relevant field
• 4+ years’ experience in Information Security, IT risk and compliance
• Experience in defining and executing an IT risk control framework for internal and third-party environments
• Experience performing information security and IT assessments and compliance/maturity assessments
• Ability to manage risks, vulnerabilities, and non-conformities; document and mitigate
• KPIs/KRIs definition and reporting for stakeholders
• Experience in IT controls audits and remediation with internal and third parties
• Strong planning, problem-solving, and complex technical issue analysis
• Knowledge of regulatory requirements (SOC 2, NIST, GDPR, COBIT, ITIL)
• Professional relationship-building and cross-functional collaboration
• English proficiency; willingness to travel
• Effective communication
• Team collaboration
• Relationship building
• GRC tool (unspecified)
• MS Office
• Information Security controls auditing

#J-18808-Ljbffr