Governance, Risk & Compliance Analyst

📋 Description

• Serve as primary SME for security/compliance inquiries (RFPs, audits)
• Own certification lifecycles (ISO 27001, Cyber Essentials) and audits
• Improve programs with GRC team; map controls to processes
• Align security with Medical Device regs via QARA
• Collaborate with product teams for security-by-design
• Integrate security controls into workflows across teams

🎯 Requirements

• 5+ years in GRC with audits and certs
• Experience with ISO 27001, SOC 2, GDPR, HIPAA, NIST SP 800-53
• Strong English, both written and spoken
• Understanding of security controls in Infra and Product environments
• Wildcard mindset to learn quickly and define compliance path
• Familiarity with Medical Device regs (ISO 13485, FDA GMP) and AI Act

🎁 Benefits

• Health, dental and vision insurance
• Meal allowance
• Equity shares
• Remote work allowance
• Flexible working hours
• Work from home