Senior GRC Analyst (m,f,x)

Responsibilities

We are representing a confidential technology organization seeking a Senior GRC Analyst to join their team in Berlin. In this role, you will support the implementation and ongoing maintenance of information security compliance and certification programs, working closely with cross-functional internal teams and external auditing agencies. You will also contribute to data protection, data privacy, and third-party vendor risk management functions.

Your key responsibilities will include:

• Leading end-to-end compliance readiness for NIS2 and supporting alignment across other key frameworks including PCI DSS, CSRD, ISO/SOC, and EU AI Act
• Planning and executing internal control assessments and coordinating external compliance audits on a defined cadence
• Translating regulatory requirements into practical controls and driving cross-functional implementation across international teams
• Owning remediation management by tracking findings, evidence, owners, and deadlines, and reporting status to stakeholders
• Improving GRC maturity through continuous monitoring, clear documentation, and mentoring junior team members
• Evaluating and validating the design and operational effectiveness of security policies, standards, and internal controls
• Developing comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences

What we're looking for

• 3+ years of experience performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA)
• Ability to interpret compliance regulations and map them to the actual implementation of systems while referencing various security frameworks
• Experience supporting data privacy regulations (GDPR, CCPA) and third-party risk management programs
• Experience developing and executing security awareness programs and trainings
• Highly organized and detail-oriented, with an ability to work independently
• Industry compliance certifications (CISA, CISM, CISSP) are a plus
• Prior experience working in a SaaS environment, mainly Cloud and AWS-based

How we work with you

Our talent team at Get A Job.ai will guide you through the entire process. When you apply through our platform, one of our recruiters will screen your application and discuss the opportunity with you in detail. If there's a strong match, we will submit your profile to our client for consideration. Please note that candidates should not contact the client directly—all communication will be managed through Get A Job.ai to ensure a professional and streamlined experience.

Pay

Compensation details will be discussed during the screening process with our recruitment team.

Get A Job.ai is an equal opportunity recruiter. We celebrate diversity and are committed to creating an inclusive environment for all candidates, regardless of race, color, religion, sex, national origin, age, disability, or any other protected characteristic.