Senior GRC Analyst

Role overview Own the hands-on delivery of security governance and assurance work, helping maintain established certification programs and prepare for additional frameworks as needs change. This individual-contributor role focuses on audit execution, vendor reviews, risk tracking, and making recurring compliance work more efficient.

Responsibilities - Coordinate internal and external audits across ISO 27001, SOC 2, and related frameworks, including evidence gathering, control readiness, auditor communication, and closing findings. - Build practical automation for evidence collection and repeatable GRC processes, using integrations, compliance-as-code, or AI-assisted workflows where useful. - Assess third-party vendors during onboarding and periodic reviews, and improve the review process over time. - Maintain the risk register, conduct assessments, and track remediation through completion. - Create and update security policies and procedures, and contribute to awareness materials and training.

Requirements - At least five years in cybersecurity GRC, IT audit, or security compliance, including direct participation in full ISO 27001 and/or SOC 2 audit cycles. - Strong communication and negotiation skills, with the judgment to maintain a well-supported position in discussions with auditors, vendors, and internal teams. - A track record of practical automation, such as scripts, integrations, GRC platform implementations, or AI-supported workflows. - Self-direction and ownership, including the ability to resolve ambiguous problems with limited supervision. - Excellent written and spoken English.

Nice to have Relevant credentials such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISSP, or CISM are useful; hands-on audit experience carries greater weight.

Benefits and work setup Remote work or an office in Riga is available, with flexible start times as late as 11 a.m. Benefits include private health insurance, three additional paid personal days, learning opportunities, mentorship, meetups, and hackathons. The role lists gross monthly pay from €5,000, depending on experience, education, and skills; office-based staff can also receive lunch.