GRC Analyst (Governance, Risk, Compliance)

Main mission

Drives security compliance: ISO 27001, NIS2, audits.

5 key responsibilities

• Drive compliance with standards: ISO 27001, NIS2, PCI-DSS.
• Conduct risk analyses and their treatment plans.
• Prepare and follow up on internal and external audits.
• Draft security policies and procedures.
• Raise awareness and track compliance indicators.

Key skills

Standards and regulations, risk analysis (EBIOS), auditing, writing.

What's expected

A living compliance that truly reduces risk, not a binder for the auditor.

Career paths

CISO, Risk Manager, Senior GRC Consultant.