Senior GRC Analyst

Role overview Coordinate security compliance and assurance work across a broad set of regulatory and industry frameworks. You’ll assess controls, work with technical teams to explain how systems operate, and improve audit processes through automation and AI tools. The role sits within a security governance, risk, and compliance function and is based remotely in Hungary.

Responsibilities - Coordinate audits across frameworks such as ISO 27001, SOC 2, PCI DSS, HIPAA, NIS2, SOX, and C5, including evidence gathering and remediation tracking. - Assess and test technical and administrative controls with engineering and security partners. - Translate system architectures into clear, audit-ready descriptions of controls. - Use AI and automation to make evidence collection, control testing, and reporting more efficient. - Maintain and improve GRC platforms, metrics, and dashboards for compliance and control visibility.

Requirements - At least four years of experience in security compliance, audit, or risk management in a technology environment. - Understanding of cloud architecture, identity and access management, infrastructure, and software development lifecycle controls. - Experience with one or more relevant frameworks, such as ISO 27001, SOC 2, PCI DSS, HIPAA, NIST 800-53, or NIS2. - Strong communication with auditors, including the ability to clarify evidence requests and explain control positions. - Practical use of AI tools to improve work efficiency.

Nice to have - Experience with compliance automation, continuous monitoring, or developing GRC platforms. - Familiarity with GRC tools or integrations with engineering, cloud, identity, or monitoring systems. - Experience building AI-assisted workflows that reduce manual compliance work.

Benefits and work setup - Remote role based in Hungary. - Benefits include health coverage, paid time off and holidays, learning support, wellness resources, employee communities, and charitable matching. Specific offerings may vary by country.