Nearshore Sector | GRC Analyst

📋 Description Support the implementation, maintenance, and continuous improvement of the Group Information Conduct comprehensive cybersecurity risk assessments and gap analyses on internal systems Drive Third-Party Risk Management (TPRM) by evaluating vendors, SaaS applications, and external Champion Security by Design by reviewing technical data flows, IAM/MFA requirements, and security Draft, review, and maintain Group security policies, procedures, and baseline documentation (PSSI) Standardize compliance evidence collection, monitor remediation action plans, and track KPIs across 🎯 Requirements 1–3+ years of professional experience in Information Security, Cybersecurity Governance, Risk, and Solid understanding of core information security frameworks and European regulations, including Practical experience conducting risk assessments, gap analyses, and evaluating third-party vendor Working knowledge of core technical security controls, including Identity & Access Management Exposure to GRC and vendor risk tools (e.g., ServiceNow GRC, OneTrust, BitSight) is a plus. Strong communication skills with the ability to translate complex regulatory and security