GRC Analyst

COCUS Prosource is all about People! We are proud to deliver skilled services and products developed by great talent, with attitude and ambition to work in innovative IT solutions.

Emotions are part of us, we encourage everyone to be what they truly are in a collaborative, informal, transparent, and open environment, that is why we take our partnerships seriously - supporting as a Talent Acquisition specialized partner on the recruitment for companies with the same People first mindset as we have!

As a GRC Analyst who is eager to build a career in cybersecurity governance and risk management. This role offers hands-on exposure to international regulatory frameworks, internal audits, and compliance initiatives within a fast-paced and collaborative environment. You’ll support the team in implementing the company’s cybersecurity controls and continuous improvement initiatives. So you can expect responsabilities such as:

• Assist in maintaining and documenting policies, standards, and procedures. 
• Support risk and compliance activities related to ISO 27001 and NIS2 alignment. 
• Monitor risk treatment plans and track progress with control owners. 
• Support the Risk Management (RM) and the 3rd Party Risk Management (TPRM) processes lifecycle. 
• Help coordinate internal security assessments and audit preparation. 
• Contribute to cybersecurity awareness and training initiatives. 
• Participate in ongoing GRC projects and process improvement activities.

• 2-3 years of experience in cybersecurity, IT audit, or risk management . 
• Understanding of security frameworks such as ISO 27001, NIST, or COBIT. 
• Excellent organizational and communication skills in English (written and spoken). 
• Bachelor’s degree in Information Management, Audit, Governance, Computer Science, or related discipline, or relevant field experience. 
• Strong motivation to grow in a governance and compliance-focused role.

• Exposure or certification in project management or information security (e.g., CAPM, CompTIA Security+). 
• Professional certifications such as ISO 27001 Lead Implementer/Auditor 
• Familiarity with GRC tools or spreadsheet-based risk management reporting

• Permanent contract with long-term career prospects 
• Competitive salary aligned with your experience and expertise 
• Annual target bonus based on performance 
• Daily meal allowance 
• Health insurance and Life insurance 
• Access to Employee Assistance Program for well-being and support 
• A flexible hybrid work model