GRC Analyst – EMEA

Job not on LinkedIn

🔥 24 minutes ago

🇬🇧 United Kingdom – Remote

💵 $89k - $105k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🎲 Risk

🚫👨‍🎓 No degree required

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Chainguard

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2021

🔐 Security

☁️ SaaS

🔒 Cybersecurity

Security • SaaS • Cybersecurity

Chainguard is a company that specializes in building secure container images to enhance software security and compliance. Their products include low-to-zero CVE container images, which are updated daily to maintain security and compliance standards such as FedRAMP, NIST 800-53, PCI-DSS, SOC2, and CIS benchmarks. Chainguard focuses on reducing vulnerabilities, automating compliance, and supporting development workflows without compromising on innovation and productivity. The company serves a wide range of industries, including highly regulated sectors, by providing hardened image solutions to mitigate software supply chain risks and enhance application security.

📋 Description

• Support audit readiness activities for SOC 2 Type II, ISO 27001, and other security assurance initiatives • Coordinate evidence collection across Security, Engineering, Legal, HR, Product, and other functions • Maintain security policies, standards, procedures, control descriptions, and supporting documentation • Assist with control testing, risk assessments, gap analysis, and remediation tracking • Keep compliance and risk information accurate in GRC platforms such as Vanta • Translate auditor, customer, and internal security requests into clear stakeholder next steps • Track action items, follow up on dependencies, and communicate status, risks, and blockers • Improve GRC workflows through documentation, automation, and modern tooling • Develop and maintain repeatable processes, checklists, runbooks, and evidence-collection practices • Support customer security reviews, questionnaires, and third-party risk activities • Learn Chainguard systems and security practices to identify inconsistencies and escalate potential risks • Partner with senior Security and GRC team members on projects improving Chainguard’s security posture

🎯 Requirements

• 2+ years of experience in information security, GRC, compliance, audit, risk, IT, or a related field; equivalent practical experience is welcome • Experience supporting audits, control activities, risk assessments, security questionnaires, or compliance programs • Strong organizational and project coordination skills • Clear written and verbal communication skills for technical and non-technical stakeholders • Structured, detail-oriented approach to documentation, evidence management, and follow-through • Curiosity about technology and security controls, with confidence to ask questions and investigate unfamiliar topics • Comfort working with spreadsheets, documentation systems, ticketing tools, and GRC platforms • Interest in improving repetitive processes through automation, better tooling, or clearer workflows • Collaborative, team-first approach and ability to work across regions and functions • Comfort working in a fast-moving environment • Experience with SOC 2, ISO 27001, NIST, or another security or assurance framework • Familiarity with GRC platforms such as Vanta, Drata, or similar tools • Experience with control testing, risk registers, remediation plans, or policy management • Exposure to cloud environments, SaaS applications, software development practices, or security operations • Familiarity with third-party risk management or customer security reviews • Experience improving workflows with automation, integrations, or lightweight scripting

🏖️ Benefits

• Flexible and remote-first culture • Team meetup opportunities • Bi-annual destination summits • Monthly stipend for coworking spaces, phone and internet costs • Stock options upon hire and promotion • Participation in secondary offerings • 10 years to exercise stock options • 100% covered health, vision, and dental insurance premiums for employee and dependents • Unlimited flexible time off • 18 weeks paid parental leave for birthing parents • 12 weeks paid parental leave for non-birthing parents • Professional growth through real security and assurance programs • Support from experienced teammates • Opportunities to improve processes and tooling • Collaboration with colleagues across EMEA and the broader organization