This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
As Information Security GRC Specialist (f/m/d) you will own and drive Awin's global Information Security Risk Management capability end-to-end, ensuring the business not only understands its risks but takes measurable action to reduce them. You will be accountable for embedding a strong culture of risk ownership across the organisation, proactively identifying gaps, and driving remediation through to completion. This role requires structured risk identification, assessment, and reporting whilst acting as a advisor to senior leadership and the board. It ensures that risk appetite is clearly defined, actively used in decision-making, and consistently monitored.
Job Responsibility:
Lead enterprise-wide risk identification and assessment across strategic initiatives, technology, and third parties
Drive risk remediation to closure, holding risk owners accountable for delivery
Own and maintain the Information Security Risk Register
Define, embed, and maintain the organisation's risk appetite
Provide clear, opinionated, and actionable risk insights to senior management and the board
Confidently challenge and influence stakeholders to ensure risks are neither understated nor inappropriately accepted
Own and continuously improve Awin's global information security risk management framework
Embed risk management into business processes
Mentor and develop GRC team members
Lead horizon scanning across emerging threats, regulatory changes, and industry developments
Requirements:
Proven track record of owning and delivering risk management initiatives end-to-end
Experience driving risk remediation across teams without direct authority
Strong experience presenting and defending risk positions to senior leadership and boards
Hands-on experience within an ISO 27001-certified ISMS environment
Strong knowledge of frameworks such as ISO 27001
Experience designing, implementing, or improving control frameworks
Experience with GRC platforms (e.g. Hyperproof)
Confident communicator (with very good English skills) - able to build relationships and challenge/influence senior stakeholders
What we offer:
Flexi-Week and Work-Life Balance: four-day Flexi-Week at full pay and with no reduction to annual holiday allowance