GRC Analyst

Devoteam

. Support implementation, maintenance, and continuous improvement of the Group ISMS aligned with ISO/IEC 27001, NIS2, and DORA .

Posted 10/15/2026full-timeRemote • Portugal, GreeceJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security and Cybersecurity Governance, with a strong focus on ISO/IEC 27001, NIS2, and GDPR compliance. Proficient in conducting risk assessments, managing third-party risks, and preparing executive-level reports in a global environment.

Highest-signal resume keywords

Information SecurityCybersecurity GovernanceRisk AssessmentsISO/IEC 27001Third-Party Risk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Risk AssessmentGap AnalysisIAMMFAEncryptionSaaS SecurityCompliance Evidence CollectionKPI TrackingRegulatory ComplianceSecurity Auditing

Soft Skills

Strong Communication SkillsActionable Advice Translation

Tools & Technologies

ServiceNow GRCOneTrustBitSight

Certifications & Qualifications

Relevant Certifications in CybersecurityEducational Background in Computer ScienceIT LawGRC

Industry Keywords

ISO/IEC 27001NIS2DORANIST CSFGDPREU AI Act

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Support implementation, maintenance, and continuous improvement of the Group ISMS aligned with ISO/IEC 27001, NIS2, and DORA
Conduct cybersecurity risk assessments and gap analyses on internal systems, applications, and architecture projects
Drive third-party risk management by evaluating vendors, SaaS applications, and external partners
Review technical data flows, IAM/MFA requirements, and security controls during project onboarding before go-live
Draft, review, and maintain Group security policies, procedures, and baseline documentation
Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across 25 country entities
Assist with risk and impact assessments for the EU AI Act and GDPR compliance
Prepare executive-level risk reports and dashboards
Report directly to the Group GRC Manager

Requirements

What you’ll need

1–3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and Compliance (GRC), or Security Auditing
Solid understanding of ISO/IEC 27001, NIS2, DORA, NIST CSF, and GDPR
Practical experience conducting risk assessments, gap analyses, and evaluating third-party vendor risks (TPRM)
Working knowledge of IAM, MFA, encryption, and SaaS security baselines
Exposure to ServiceNow GRC, OneTrust, or BitSight is a plus
Strong communication skills to translate regulatory and security requirements into actionable advice
Relevant certifications or educational background in Computer Science, Cybersecurity, IT Law, or GRC are highly valued
Full fluency in English is mandatory
French language skills are a strong plus
Ability to work in a global, multicultural environment

Benefits

Comp & perks

Remote work option
Equal-opportunity employment
Disability-inclusive hiring