GRC Analyst (EMEA)

What you'll do

• Support SOC 2 Type II, ISO 27001, and other audit readiness and security assurance activities, including evidence coordination and control documentation.
• Assist with control testing, risk assessments, gap analysis, remediation tracking, customer security reviews, and third-party risk activities.
• Maintain accurate GRC records and improve repeatable workflows, documentation, and evidence-collection practices.

What they ask for

• 2+ years of experience in information security, GRC, compliance, audit, risk, IT, or a related field; equivalent practical experience is welcome.
• Experience supporting audits, control activities, risk assessments, security questionnaires, or compliance programs.
• Strong organizational and project coordination skills, with clear written and verbal communication.
• Structured, detail-oriented approach to documentation and follow-through; comfort with spreadsheets, documentation systems, ticketing tools, and GRC platforms.

Nice to have

• Experience with SOC 2, ISO 27001, NIST, or another security or assurance framework; familiarity with GRC platforms such as Vanta or Drata.
• Exposure to cloud, SaaS, software development, security operations, third-party risk, or workflow automation.

Pay

$89,000 — $105,000 USD (base salary)

Tools

SOC 2 Type II, ISO 27001, Vanta, Drata, NIST

AI focus

The company builds hardened, secure, production-ready open-source software used by AI agents; this role supports compliance and risk programs, with no specific AI duties stated.