GRC Analyst

🔥 56 minutes ago

🌐 Greece, Portugal – Remote

🇬🇷 Greece – Remote 🇵🇹 Portugal – Remote

⏰ Full Time

🟢 Junior

🎲 Risk

🚫👨‍🎓 No degree required

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Devoteam

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Devoteam is a multinational technology consulting company that specializes in delivering innovative solutions in areas such as Artificial Intelligence, Cloud Managed Services, and Cybersecurity. With a focus on business transformation, Devoteam helps organizations optimize their IT infrastructure and migrate to cloud-native architectures. They partner with leading technology providers like AWS, Google Cloud, and Microsoft to drive digital transformation and sustainable IT practices across various industries.

📋 Description

• Support implementation, maintenance, and continuous improvement of the Group ISMS aligned with ISO/IEC 27001, NIS2, and DORA • Conduct cybersecurity risk assessments and gap analyses on internal systems, applications, and architecture projects • Drive third-party risk management by evaluating vendors, SaaS applications, and external partners • Review technical data flows, IAM/MFA requirements, and security controls during project onboarding before go-live • Draft, review, and maintain Group security policies, procedures, and baseline documentation • Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across 25 country entities • Assist with risk and impact assessments for the EU AI Act and GDPR compliance • Prepare executive-level risk reports and dashboards • Report directly to the Group GRC Manager

🎯 Requirements

• 1–3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and Compliance (GRC), or Security Auditing • Solid understanding of ISO/IEC 27001, NIS2, DORA, NIST CSF, and GDPR • Practical experience conducting risk assessments, gap analyses, and evaluating third-party vendor risks (TPRM) • Working knowledge of IAM, MFA, encryption, and SaaS security baselines • Exposure to ServiceNow GRC, OneTrust, or BitSight is a plus • Strong communication skills to translate regulatory and security requirements into actionable advice • Relevant certifications or educational background in Computer Science, Cybersecurity, IT Law, or GRC are highly valued • Full fluency in English is mandatory • French language skills are a strong plus • Ability to work in a global, multicultural environment

🏖️ Benefits

• Remote work option • Equal-opportunity employment • Disability-inclusive hiring