GRC Specialist
On-sitePrague, Prague, Czechia
Job Summary
Maintain and evolve internal controls and policies to ensure compliance with industry standards and regulatory requirements. Produce high-quality risk assessments and reporting dashboards that translate complex technical vulnerabilities into actionable insights for leadership. Coordinate internal and external audits while serving as the primary contact for regulators and third-party auditors. Develop frameworks for secure and ethical AI use, monitor tool adoption for data privacy, and support IT and Security teams on new infrastructure projects. Lead compliance initiatives from gap analysis through remediation and final certification, manage the corporate policy lifecycle, and evaluate third-party vendors against security standards. Work alongside HR and Legal to develop security awareness training programs.
Required Qualifications
- 5 + years of experience in GRC, Information Security, or IT Audit roles with a track record of managing complex compliance projects
- Proficiency with GRC software (e.g. Vanta)
- strong grasp of Excel for data analysis and risk modeling
- A deep understanding of industry frameworks such as SOC2, ISO 27001, ISO 42001, NIST, or GDPR
- Familiarity with mapping controls to business processes
- willingness to contribute to technical security discussions
- Confidence in interpreting regulatory jargon and presenting risk-based concepts to non-technical stakeholders
- Proven ability to manage multiple audit cycles and remediation deadlines at once without compromising on accuracy
- meticulous approach to documentation and evidence collection
- demonstrating a high level of organizational integrity
Desired Qualifications
- Experience with FedRamp
- Relevant certifications such as CISSP, CISA, CRISC, or CISM
- A Law degree
- a Technical background (e.g., cloud security, application security)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.