Senior GRC Analyst

About the role

The Information Security Governance & Assurance team at FYUL is small and execution‑focused. Reporting to the Cybersecurity Governance & Assurance Manager, the Senior GRC Analyst drives audit execution, vendor security assessments, risk management and the automation of GRC processes.

Key responsibilities

• Plan and execute internal and external audits for ISO 27001, SOC 2 and related frameworks, manage evidence collection and follow‑through on findings.
• Design and implement automation for evidence collection, compliance‑as‑code and AI‑based workflows to reduce manual effort.
• Conduct security assessments of third‑party vendors during onboarding and annual reviews, continuously improving the process.
• Maintain the risk register, perform risk assessments and ensure timely remediation.
• Develop and maintain information security policies, procedures and contribute to security awareness materials and training.

Required profile

• 5+ years experience in cybersecurity GRC, IT audit or security compliance with hands‑on ISO 27001 and/or SOC 2 audit cycles.
• Strong communication and negotiation skills, able to handle auditors, vendors and internal stakeholders confidently.
• Proven ability to build practical automation solutions (scripts, integrations, GRC platform implementations).
• Self‑directed working style with strong ownership and excellent written and spoken English.

Required skills

• ISO 27001 audit processes
• SOC 2 compliance
• GRC platform implementation
• Automation scripting and integrations
• AI‑assisted workflow design

What we offer

• Monthly gross salary of €5,000+ based on experience.
• High‑trust, compact team with minimal bureaucracy.
• Option to work remotely or from a modern office in Riga.
• Flexible start time (up to 11 AM) and flexible working hours.
• Private health insurance and extra paid days off for wellbeing and personal celebrations.
• Learning opportunities, mentorship, internal meet‑ups and hackathons.
• Free healthy lunch for office‑based employees and employee‑discounted merch.