This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are seeking a detail-oriented GRC (Governance, Risk, and Compliance) Analyst to support ongoing security, risk management, and compliance initiatives. This contract role will partner with IT, Security, Audit, and business stakeholders to strengthen internal controls, ensure regulatory alignment, and support enterprise risk programs.
Job Responsibility
Support governance, risk, and compliance programs across IT and business functions
Conduct risk assessments, control testing, and gap analysis for systems and processes
Assist with audit readiness efforts (internal/external), including evidence collection and documentation
Maintain and update policies, procedures, and control frameworks
Monitor compliance against frameworks such as SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, or SOX (as applicable)
Track remediation efforts and partner with stakeholders to address audit findings and control gaps
Support third-party/vendor risk assessments and ongoing monitoring
Leverage GRC tools to manage risk registers, controls, and reporting
Provide reporting and dashboards on risk posture and compliance status to leadership
Requirements
5 years of experience in GRC, IT audit, risk management, or information security
Experience working within one or more frameworks (SOC 2, ISO 27001, NIST CSF, SOX, etc.)
Familiarity with control design, testing methodologies, and audit processes
Experience collaborating with cross-functional teams (IT, Security, Legal, Finance)
Strong documentation, communication, and organizational skills
Nice to have
Relevant certifications preferred (e.g., CISA, CRISC, CISSP, or CISM)