Information Security Analyst – Governance & Compliance

About the role

We are looking for an experienced Information Security Analyst to strengthen our security governance, risk and compliance program. The analyst will ensure that security controls, policies and regulatory obligations are implemented and aligned with frameworks such as ISO 27001, NIST, DORA, GDPR, PSD2 and PCI‑DSS.

Key responsibilities

• Support the implementation and maintenance of the ISMS and related security policies, standards and procedures.
• Conduct ICT and information‑security risk assessments, maintain risk registers and drive remediation activities.
• Coordinate evidence collection for internal and external audits and monitor regulatory changes (GDPR, DORA, PSD2, PCI‑DSS).
• Perform vendor and third‑party security assessments, review questionnaires and monitor supplier risk.
• Track audit findings, prepare management reports and support security assurance testing.
• Collaborate with IT, Legal, Risk, Compliance and Operations to promote security awareness and best practices.

Required profile

• Bachelor’s degree in Information Security, Computer Science, Risk Management or a related field.
• 2–5 years of experience in information security, risk, compliance, audit or GRC functions.
• Strong analytical, documentation and communication skills with the ability to manage multiple stakeholders.

Required skills

• ISO 27001, NIST Cybersecurity Framework, CIS Controls, COBIT.
• Regulatory knowledge of GDPR, DORA, PSD2, PCI‑DSS.
• Risk assessment and risk register management.
• Audit coordination and security assurance testing.
• Vendor/third‑party security assessment and cloud security.