Senior GRC Analyst

About This Role

This senior role focuses on governance, risk, and compliance (GRC) within an enterprise SaaS company that serves major global banks. The core responsibility involves preparing and managing the external audit program for ISO 27001, SOC 1, and SOC 2. Initially, the role also includes owning the enterprise risk register and presenting risk reports to the Executive Leadership Team.

Responsibilities

• Lead audit readiness, including evidence collection and control walkthroughs, and track findings to closure
• Test control design and operating effectiveness, and close the gaps found
• Own the risk register and the frameworks for risk appetite, exceptions, and prioritization
• Run Information Security risk assessments across technology and physical locations
• Support third-party risk assessments and client audits
• Help review higher-risk AI use cases and shape responsible AI standards

Requirements

• At least five years in Information Security or a comparable role
• Hands-on support of external audits (ISO 27001, SOC 1 and/or SOC 2 Type II), including control testing and direct work with auditors
• Technology risk management experience, with the ability to explain technical findings in business terms
• Experience supporting an established ISMS and maintaining accreditations
• Experience managing or supporting third-party security assessments
• Fluent English and confidence working with UK stakeholders and external auditors

Nice to have:

• Financial services or another regulated industry
• ISO 27001 Lead Auditor or Lead Implementer, CISA or CRISC
• IT audit experience at a Big Four or comparable firm
• Familiarity with DORA

Benefits

• Annual performance bonus
• Private medical insurance, healthcare cashback scheme and 4x salary life assurance
• Unlimited annual holiday and enhanced family leave
• Work abroad for up to 6 weeks a year
• Learning and development budget

Important Details

• Locations: Poland (remote), with occasional travel to Wrocław

Application Process

• Apply directly on this advert

About the Company

This enterprise SaaS company is trusted by major global banks.