GRC Analyst — Information Security GRC

Job Description Role purpose Work as a direct extension of the onshore Information Security GRC team in Düsseldorf. You support strategic GRC workstreams led from headquarters: ISMS development, AI governance, NIS2 readiness, supplier risk, policy work, and ad-hoc projects. Suits someone who wants substantive analyst-level work close to a senior GRC function, not back-office task processing. Key responsibilities - Take on analyst-level work assigned directly by onshore GRC colleagues across ISMS, AI governance, NIS2, supplier risk, and policy workstreams. - Draft first versions of documents — policy excerpts, briefing notes, analyses, risk write-ups, audit responses — for review by onshore owners. - Conduct desk research on frameworks, regulations, vendor capabilities, and benchmarking to support onshore decision-making. - Prepare data extracts, summaries, and structured inputs for stakeholder meetings, leadership reviews, and audits. - Maintain shared workspaces, trackers, and registers; coordinate with business entities and group functions on behalf of onshore colleagues when delegated. - Pick up ad-hoc tasks across the GRC portfolio as they arise; communicate progress, blockers, and risks transparently.