GRC Business Analyst Job at SNI sp. z o.o.

Business Analyst (SAP Modules)

Advent Global Solutions, Inc. In Houston, Tx is seeking a Business Analyst (Sap ...

Location

United States , Houston

Salary:

149947.00 USD / Year

Advent Global Solution

Expiration Date

Until further notice

Requirements

Bachelors degree in Computer science, Information Technology, Information Systems, Business Administration, Commerce or any related field of study, plus at least two (2) years of experience in the job offered or in any related position(s)
In lieu of the above-stated primary requirements, the employer will accept no degree plus four (4) years of experience in the job offered or in any related position(s)
Employer will accept a three- or four-year degree, and will accept a foreign degree
Employer will accept any suitable combination of education, training or experience
Qualified applicants must have demonstrable experience, knowledge, proficiency, and skill with the following: Two or more of the following SAP ECC modules: SAP ABAP
SAP SECURITY
SAP GRC
FI/CO
GL
AP

Job Responsibility

Gather and analyze business requirements, reports, and other data processing problems for the design, development, and implementation of SAP in the following: fi/co, sales and distribution (SD), material management (MM), production planning (PP), quality management (QM), business warehouse (BW) modules to meet global and local legal and business requirements
Prepare business requirement document, important key notes, and functional specifications documents
Configure modules based on the business requirements, guiding ABAP programs, GAP analysis
Perform quality check and test SAP software applications to determine compliance with business user needs and logic
Assist project manager in execution of FI/CO, MM, SD, PP, QM aspects of master client configuration
Design, develop, debug, modify, enhance, implement, integrate ERP based computer software applications in SAP FICO
Prepare blue print, design, functional or technical specification review
Work with other functional or business members to maintain and apply coherent, optimized, integrated, and standardized processes

Fulltime

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Fulltime

Security Governance Risk & Compliance (GRC) Analyst

Here at Virtru you’ll help build a cutting edge security compliance program alig...

Location

United States , Washington, DC

Salary:

130000.00 - 180000.00 USD / Year

Virtru

Expiration Date

Until further notice

Requirements

Minimum of 5+ years of information security, IT audit and/or IT Risk Management, or GRC Analyst/Engineer experience
Deep understanding of at least few of the following: CMMC, NIST 800-53 & 800-171, FedRAMP, SOC 2, PCI, and/or other global privacy compliance frameworks
Technical acumen. Strong understanding of modern cloud technologies (AWS, GCP, Azure, etc.) and familiarity with GRC tools (Hyperproof, Vanta, Drata, etc) and SIEM tools (Datadog, Splunk)
You’re a relationship builder and have worked with both business and technical risk and understand how to translate risk to various levels of the organization
Have experience training and coaching teams to become better security and privacy practitioners
Like working on an autonomous agile team
Ability to resolve conflicts and drive issues to completion
Work independently with little or no supervision while maintaining a high level of efficiency
Hands on experience deploying and managing vulnerability scanning/cloud security posture management tools (Wiz, Prismacloud, etc.) to meet security compliance requirements
Real-world IR experience participating on security On-Call teams

Job Responsibility

Manage and implement complex controls frameworks for large systems, consisting of Cloud infrastructure and Software as a Service (SaaS) services (GCP, AWS, GitHub, Okta, etc)
Design and develop automation solutions for evidence collection across Cloud infrastructure, endpoints, and SaaS services
Conduct risk assessments across business units and processes. Identify risk findings and recommend remediation and risk mitigation strategies
Assist or implement automated controls to support risk mitigation efforts across various business units with stakeholders
Incorporate CMMC certification into Virtru’s slate of compliance assessments and ongoing monitoring activities (FedRAMP, SOC 2, PCI)
Facilitate the third-party vendor on-boarding and annual review process by evaluating the security of current and prospective partners
Participate in incident response (IR) activities, providing risk analysis and remediation support as needed
Enhance the team with your individualism, spirit, and love of learning

What we offer

A Flexible PTO policy
A $1,500 annual Learning & Development Stipend
Frequent company-sponsored team celebrations
Access to an Employee Assistance Program
Access to Headspace, a mental health app
A flat 3% contribution to your retirement account
A high degree of flexibility
Competitive compensation
Generous parental, medical, and bereavement policies
401K contribution and stock options

Fulltime

Security GRC Analyst

Juni is seeking a Security GRC (Governance, Risk, and Compliance) Analyst to pla...

Location

Sweden , Stockholm; Gothenburg

Salary:

Not provided

Juni

Expiration Date

Until further notice

Requirements

2 to 4 years of experience in information security governance, risk, or compliance roles
Demonstrated experience with compliance frameworks and regulations (e.g., PCI DSS, ISO 27001, GDPR, PSD2, EBA outsourcing and DORA)
Degree in Cybersecurity or Information Systems or similar
Knowledge of security frameworks (e.g., CIS Controls, NIST CSF)
Solid understanding of risk assessment methodologies and hands-on experience with risk registers and third-party risk management
Experience in coordinating activities for security certifications and audits
Ability to develop and track security metrics (KPIs)
Strong analytical, problem-solving, and organisational skills
Excellent communication skills, comfortable presenting to various stakeholders
A proactive and independent worker who is also a strong team player

Job Responsibility

Maintain and update core security documentation, including policies, procedures, and instructions, ensuring they remain current and relevant
Identify, collect, and analyse data to track key security performance indicators (KPIs) and metrics, generating reports and dashboards to communicate security performance to stakeholders
Maintain the risk register and support daily risk management activities with growing independence
Follow up on the remediation of risks identified in new projects, third-party engagements, and other business initiatives
Conduct thorough security posture assessments of new vendors and perform periodic reviews of existing ones
Support our 3rd party procurement process
Monitor the implementation and effectiveness of security controls across the organisation
Coordinate and support activities to maintain key security certifications, including PCI-DSS and ISO 27001
Coordinate and support the implementation of remediation plans to address identified compliance gaps
Provide support in responding to security-related questions during partner due diligence and assist in providing necessary information for cyber insurance renewals

What we offer

Work hybrid
Meet all Junis IRL at the company onsite each year
Diversity is at our core
Progress your career whether you choose to manage people or not
Stock options
Vacation 30 days
Private Health insurance
Beautiful offices in central Gothenburg and Stockholm, front row sea view

Fulltime

Cybersecurity GRC Tool Analyst

Cybersecurity GRC Tool Analyst to analyse the technology requirements of the var...

Location

Canada

Salary:

97600.00 - 181000.00 CAD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's degree in Information Security, Information Technology, Risk Management or a related field, or equivalent experience
CISSP, ISO 27001 Lead Implementer, or similar certification
GRC platform certifications (e.g., Archer Certified Professional, ServiceNow GRC, Drata Admin, OneTrust Certified)
ITIL Foundation (a plus)
5-7 years of experience in Information Security, IT Governance, or Risk Management
5+ years of experience working with GRC platforms (e.g., Archer, ServiceNow GRC, AuditBoard, Drata, OneTrust, or similar)
Expert at working with Governance Risk & Compliance platforms
Strong understanding of cybersecurity and compliance frameworks (e.g., NIST CSF, ISO 27001)
Experience with basic integrations and workflow configurations
Strong organizational skills and attention to detail

Job Responsibility

Administer and maintain the GRC platform, including configurations, workflows, and reporting dashboards
Support the integration of the GRC tool with key enterprise systems (e.g., asset inventory, ticketing systems, vulnerability management tools)
Collaborate with cybersecurity, policy, risk, compliance, and IT teams to capture business requirements and translate them into functional tool capabilities
Assist in onboarding and managing control frameworks (e.g., ISO 27001, SOC 2, NIST CSF, FedRAMP) within the platform
Monitor data quality, ensure accurate reporting, and maintain platform integrity
Support control owners and stakeholders in using the GRC platform for assessments, evidence collection, and tracking remediation activities
Maintain user roles and permissions, ensuring proper access management
Document processes, workflows, and platform configurations
Provide training and guidance to end users on tool functionality and best practices
Coordinate with tool vendors for issue resolution, upgrades, and enhancements

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive benefits suite supporting physical, financial and emotional wellbeing

Fulltime

Senior Security & Compliance Analyst

Become a Senior Security & Compliance Analyst for Bloomreach! You will be an ess...

Location

Slovakia , Bratislava; Brno; Prague

Salary:

3000.00 EUR / Month

Bloomreach

Expiration Date

Until further notice

Requirements

Strong knowledge of industry compliance requirements and standards
Good understanding of SaaS Business
Good understanding of Governance, Risk, and Compliance in IT environment
Outstanding communication and interpersonal abilities
Previous experience as a compliance analyst, compliance officer, compliance manager, or similar position in a related field
Advanced analytical abilities
Effective research skills
Ability to perform under pressure
Experience with ISO security standards
Experience with SOC auditing

Job Responsibility

Perform periodic audits on company procedures and processes and report on the organization’s compliance
Identify, analyze, and resolve compliance issues
Support the sales process by completing RFPs
Ensure that all policies and standards are regularly reviewed and up-to-date
Keep the company’s process mapping and responsibilities structure chart up to date
Develop and update existing compliance policies and related documentation
Proactively research to stay up-to-date with regulations and rules
Communicate regulations to internal and external parties
Assist with management review preparation
Communication with clients across various regions (EMEA, US)

What we offer

Restricted stock units
Company performance bonus
Great deal of freedom and trust
Flexible working hours
Virtual-first work with several Bloomreach Hubs
Company events
5 paid days off to volunteer
People Development Program
Communication coach
Leader Development Program

Fulltime

Senior Information Security Compliance Analyst

We're looking for a technically grounded Senior IS Compliance Analyst who speaks...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

Hands-on experience in technical security roles such as Security Operations, Incident Response, Security Analysis, penetration testing, or similar
Practical knowledge of security tools, SIEM platforms, vulnerability management, and security monitoring
and ability to read and understand security logs, configurations, and technical documentation
6+ years of total experience with significant time in GRC
Working knowledge of ISO 27001, NIST frameworks, SOC 1/2, and GDPR requirements
Experience developing and implementing information security policies and controls
ISO 27001:2022 Lead Implementer and Lead Auditor certification

Job Responsibility

Lead technical security assessments and integration of acquired companies, mapping their security architectures and controls to our GRC frameworks, identifying gaps, and building remediation roadmaps that address both technical security and compliance alignment
Bridge technical security and business stakeholders by evaluating risks through a technical lens, working alongside security engineering teams to translate GRC requirements into practical security measures, and communicating effectively across technical and non-technical audiences
Develop and harmonize security policies and control frameworks across acquired entities, ensuring they're both audit ready and operationally sound, while translating between technical security requirements and governance documentation
Own customer security questionnaire responses by leveraging your hands-on security background to provide detailed, accurate answers and collaborating with infrastructure, application security, and operations teams to gather technical evidence
Drive continuous improvement of our GRC program through technical security enhancements, meaningful security and compliance metrics, and process improvements that increase both control effectiveness and operational efficiency

What we offer

health and welfare benefits
tuition assistance
401K savings and other retirement programs
employee assistance programs

Cyber Manager's Control Assessment (MCA) Lead Analyst

This role will report to the Cybersecurity MCA Group Manager, responsible for pr...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Have at least 8+ years of relevant experience
Experience in Manager’s Control Assessment (MCA), Operational Risk, Information Security, Cybersecurity, Risk Management, and/or Governance, Risk and Control (GRC)
Risk Management, Cybersecurity, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)
Proven experience in implementing sustainable solutions and improving processes
Bring creative approaches to help us drive value for clients
Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks
Proficiency with Microsoft Office, advanced Excel skills (e.g. macros, pivots, complex formulas)
Knowledge of data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI
Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus
Fluent in English (ability to read, write, and speak)

Job Responsibility

Manage the planning, coordination, and execution of MCA Transformation program for CISO
Drive MCA best practices, transformation, and execution consistency across business/functions
Lead efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO
Gain expert-level knowledge of MCA Standard, Procedure, and tools to support future-state MCA
Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA execution
Identify and document key controls necessary for mitigation of cybersecurity risk
Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points
Partner with CISO’s Enterprise Architecture Methodology (EAM) Lead team by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification
Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders
Actively manage relationships with CISO business partners and risk management teams to achieve sustained success

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

GRC Business Analyst

SNI sp. z o.o.

Location:

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
February 08, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for GRC Business Analyst

Business Analyst (SAP Modules)

Senior GRC Analyst

Security Governance Risk & Compliance (GRC) Analyst

Security GRC Analyst

Cybersecurity GRC Tool Analyst

Senior Security & Compliance Analyst

Senior Information Security Compliance Analyst

Cyber Manager's Control Assessment (MCA) Lead Analyst

GRC Business Analyst

SNI sp. z o.o.

Location:

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:February 08, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for GRC Business Analyst

Business Analyst (SAP Modules)

Senior GRC Analyst

Security Governance Risk & Compliance (GRC) Analyst

Security GRC Analyst

Cybersecurity GRC Tool Analyst

Senior Security & Compliance Analyst

Senior Information Security Compliance Analyst

Cyber Manager's Control Assessment (MCA) Lead Analyst

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
February 08, 2026