Information Security GRC Analyst

About the role

We are looking for an Information Security GRC Analyst to join a global security team supporting a major international organisation in the events and entertainment sector. The role combines governance, risk, compliance and audit activities while working closely with German and English‑speaking stakeholders across multiple regions.

Key responsibilities

• Support and drive Information Security Governance, Risk & Compliance (GRC) initiatives.
• Conduct risk assessments, coordinate remediation and manage risk registers.
• Work with ISO 27001, NIST CSF, GDPR and internal control frameworks.
• Produce executive‑level risk reports and security documentation.
• Partner with business, IT and senior stakeholders across regions.
• Support audit activities, compliance projects and continuous improvement.
• Manage supplier and third‑party risk management activities.
• Help improve GRC processes and tooling.

Required profile

• Previous experience in Information Security GRC, cyber risk, IT audit or compliance.
• Strong understanding of ISO 27001, NIST CSF and security governance frameworks.
• Proven ability to translate technical risks into business impact.
• Fluent German and English communication skills.
• Experience working with senior leadership and cross‑functional teams.

Required skills

• ISO 27001
• NIST CSF
• GDPR
• LogicGate
• Archer
• ServiceNow GRC
• Identity & Access Management (IAM)

What we offer

• Competitive salary up to £65,000 per year.
• Comprehensive benefits package.
• International, collaborative work environment.
• Opportunities for professional growth in security transformation.