Back to jobs
Support the Governance, Risk & Compliance Program across the organization.
Manage and maintain the information security risk register, track remediation progress, and prepare concise risk reporting.
Assess security risks with a practical technical understanding and work closely with IT and Engineering teams on mitigation plans.
Maintain and update company security documentation, policies, standards, and procedures.
Coordinate and prepare evidence for internal and external audits, ensuring accuracy and timely responses.
Monitor risk and compliance initiatives, escalate issues when required, and provide regular updates to management.
Collaborate with Vulnerability Management and Incident Response teams to ensure visibility of gaps, emerging threats, and required actions.
Drive core security awareness activities including onboarding/annual training, internal communications, and phishing simulations.
Maintain training and compliance records and support regulatory/audit requirements.
Track metrics for all GRC activities and share timely reports with management.
Contribute to strengthening governance, compliance, and risk‑aware culture across the organization.

Information Security - GRC: Risk and Compliance
WroclawPosted 1 months ago
Full-timeonsitemid