GRC Associate

About the role

The Governance, Risk, and Compliance (GRC) Associate will support the security risk and control assessment processes that align with SOC 2, ISO 27001 and other regulatory standards. This position offers hands‑on experience in risk management, compliance audits, information governance and records management while acting as a liaison between IT/IS GRC services and internal business units.

Key responsibilities

• Assist in documenting and implementing internal controls to mitigate risks and ensure compliance with SOC 2, ISO 27001 and related frameworks.
• Support risk identification, assessment and mitigation activities.
• Collect, compile and analyse data for compliance audit preparation.
• Coordinate compliance data with auditors and internal departments during internal audits.
• Maintain and enforce information‑security policies, procedures and standards.
• Contribute to security and compliance projects and report on status.
• Evaluate third‑party vendor security compliance.
• Participate in security‑awareness training and risk‑culture initiatives.

Required profile

• Bachelor’s degree in IT, Computer Science, Cybersecurity or a related field.
• 1‑2 years of experience in risk management, compliance analysis, information security or IT audit.
• Basic understanding of SOC 2, PCI DSS, GDPR, ISO 27001 or similar frameworks.
• Strong analytical, problem‑solving and organizational abilities.
• Excellent written and verbal communication skills.

Required skills

• Proficiency with Microsoft Office Suite (Excel, Word, PowerPoint).
• Familiarity with GRC tools for data analysis and reporting.

What we offer

• Opportunity to work on real‑world security and compliance projects.
• Collaborative environment with IT, Compliance and Legal teams.
• Professional growth in a fast‑paced, innovative company.