Salary
💰 €3,500 per month
Job Level
Mid-LevelSenior
Tech Stack
ServiceNow
About the role
- Manage end-to-end certification processes for various standards (e.g., ISO 27001, SOC2, MSPs)
- Design, implement, and continuously improve a comprehensive risk management framework
- Build and maintain governance structure: policies, control assessments, KRIs/KPIs, audit oversight, reporting
- Act as primary point of contact for internal and external audits; coordinate responses and remediation
- Utilize and manage GRC tools to streamline processes and reporting
- Collaborate with executives, the CISO, and cross-functional teams to communicate risk posture and compliance metrics
- Contribute to and potentially lead third-party risk management, including vendor assessments and customer trust initiatives
Requirements
- 3+ years of progressive experience in risk management, compliance, or governance roles
- Proven track record of successfully managing and delivering complex certification efforts (e.g., ISO 27001, SOC2)
- Strong background in various risk assessment methodologies and practical experience in building and executing effective risk treatment plans
- Demonstrated experience in managing and optimizing GRC tools (e.g., OneTrust, RSA Archer, ServiceNow)
- Excellent verbal and written English communication skills
- Strong organizational and project management skills
- It would be awesome: Professional certifications such as CISM, CRISC, or other relevant security and risk management credentials
- Familiarity with standards and frameworks: ISO 27001, NIST 800‑53/CSF, SOC2