Senior GRC Analyst (m,f,x)
Senior GRC Analyst (m,f,x)
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
The role
Were looking for a new teammate who will support the implementation and ongoing maintenance of information security compliance and certification programs working with cross-functional internal teams and external auditing agencies. The person will also support data protection data privacy and third-party vendor risk management functions.
The position will be part of the Governance Risk & Compliance (GRC) team at HelloFresh that is responsible for creating maintaining and improving HelloFreshs security risk management program and remediation activities; information security and data privacy related processes policies and guidelines; supporting compliance and certification related activities; and driving security awareness and education.
Above all we are looking for people who willmake HelloFreshbetter.We believe there are many different ways of developing skills and we love diverse experiences! So even if you dont tick all the boxes but think youd thrive in this role we would really like to learn more about you.
What youll do
- Lead internal assessments and coordinate external compliance audits at planned intervals
- Evaluate and validate the design and operational effectiveness of security policies standards and internal controls to help reduce compliance risk in the company
- Monitor open items from internal assessments and external compliance audits to ensure completion of remediation activities
- Support continuous monitoring processes to assess compliance with information security policies and standards as well as legal and regulatory compliance requirements
- Assist as required with third-party vendor security reviews and assessments regarding their security and data privacy status
- Collaborate with various teams to identify document assess and remediate security risks
- Participate in the development and implementation of security policies standards security awareness and end-user education efforts
- Develop comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences
- Use formal project management skills in planning tracking and reporting to drive remediation activities
What youll bring
- 3 years experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC) SOC 2 ISO 27001 PCI DSS EU NIS2 and various data privacy directives (GDPR CCPA/CPRA etc.)
- Ability to interpret compliance regulations and map them to the actual implementation of systems whilst referencing various security frameworks
- Experience supporting data privacy regulations (GDPR CCPA) and third-party risk management programs
- Experience with developing and executing security awareness programs and trainings
- Highly organized and detail-oriented with an ability to work independently
- Industry compliance certifications (CISA CISM CISSP) are a plus
- Prior experience working in a SaaS environment mainly Cloud and AWS-based
What we offer
Elevate your lifestyle! Join one of Europes fastest-growing tech powerhouses in a dynamic phase of expansion.
- Immerse yourself in a diverse global community of 90 nationalities.
- Enjoy a competitive compensation package that goes beyond the norm with perks like a HelloFresh- subsidized Pension Scheme Berlin relocation support and a Hybrid working model.
- Elevate your lifestyle with exclusive discounts on your weekly HelloFresh box and office meals.
- Invest in your growth with a German language learning budget and access to the HelloFresh Academy.
- Plus weve got your well-being covered with mental health support transportation perks and working-parent-friendly benefits. From our 24/7 gym accesswellbeing platforms like Headspace and Spill to sabbatical leave options HelloFresh is not just a workplace; its a lifestyle of perks and possibilities!
HelloFresh is committed to the principles of equal employment opportunity and providing reasonable accommodations to candidates with disabilities. If you need an accommodation during the application process please reach out to us at:
Europe:
APAC:
United States:
Canada:
Required Experience:
Senior IC
Employment Type
Full Time
