At EcoVadis, security is a product feature and a primary driver of customer trust and satisfaction. We are seeking a results-oriented IT Security GRC Senior Associate to safeguard our assets and global reputation, and act as a strategic partner to our sales and product teams.You will lead risk mitigation strategies and ensure compliance with global standards, fostering a culture of security across our organization and partner ecosystem, while promoting business acceleration. This is a high-impact opportunity for an expert to design and continuously develop a world-class GRC program that aligns with our strategic goals, removes friction from sales cycles, and exceeds the evolving customer expectations and regulatory needs. Key Responsibilities:<ul><li>Develop and implement GRC Strategy:<ul><li>Create, author, develop and implement a comprehensive GRC strategy, which includes policies, procedures, and security requirements that aligns with industry best practices and regulatory requirements.</li><li>Deploy, maintain and continuously develop a proprietary control framework that is consistent with the organization’s compliance requirements and needs.</li><li>Support in conducting risk and control assessments, and identify, evaluate, and prioritize potential threats and vulnerabilities.</li><li>Author and conceptualize original risk mitigation plans and corrective actions to address risks effectively.</li><li>Collaborate with Product teams to ensure "Compliance-by-Design," providing requirements and highlighting security risks during the discovery phase of new features and improvements.</li></ul></li><li>Ensure Regulatory and Industry Standards Compliance:<ul><li>Stay abreast of relevant laws, regulations, security frameworks and industry standards (e.g. GDPR, ISO 27001, NIS2, SOC 2,...), and work towards ensuring the organization’s compliance with them.</li><li>Promote awareness of applicable laws and regulations towards employees and upper management.</li><li>Conduct regular audits and assessments to monitor compliance and identify areas of improvement.</li><li>Be an active participant in third party audits, including leading them to support IT Security needs.</li></ul></li><li>Support Business Processes:<ul><li>Perform deep-dive analysis and author technical responses for security questionnaires, translating complex internal security controls into customized client-facing documentation.</li><li>Review and provide expert analysis of security clauses in contracts, drafting customized security requirements for clients and suppliers.</li><li>Participate in clients meetings to address cybersecurity concerns and requirements,</li><li>Conduct and document security reviews of SaaS applications, producing original risk assessment reports and designing mitigation recommendations.</li><li>Building and maintaining a Security Trust Center or similar customer-facing resources.</li></ul></li><li>Provide Strategic Guidance:<ul><li>Become one of the main points of contact for senior management on GRC matters, and create strategic advisory materials/models detailing the impact of GRC initiatives on business decisions.</li><li>Develop and maintain strong relationships with key stakeholders across the organization.</li></ul></li><li>Ensure Functional Supervision<ul><li>Provide expert guidance and alignment for the GRC team; act as the technical mentor and "quality gatekeeper" for key deliverables, including security awareness program and third-party risk assessments.</li></ul></li><li>Deliver IT Security Reporting:<ul><li>Develop, support and maintain key performance indicators (KPI) for the Security function.</li><li>Gather, analyze and report on security metrics and compliance status.</li><li>Prepare and design customized presentations and reports to senior management on the status of the IT Security program, including key risks, threats, and vulnerabilities.</li></ul></li><li>Implement AI-Powered GRC Operations:<ul><li>Lead the practical adoption of Generative AI tools (LLMs, AI Agents) to automate evidence collection, draft security policies, and summarize regulatory changes, significantly increasing team efficiency.</li></ul></li></ul>Note: This job description is intended to provide a general overview of the position. It is not intended to be an exhaustive list of duties and responsibilities.

EcoVadis is the leading provider of business sustainability ratings.
Our solutions are backed by an international team of experts and powerful technology. We analyze data and build sustainability scorecards that give companies actionable insights into their environmental, social and ethical risks.

Senior IT Security GRC Specialist

About the Job

About the Company

EcoVadis

Similar Jobs

Senior Officer, Security & Governance

Senior Officer, Security & Governance

Senior Application Security Specialist

Senior Application Security Specialist

Sr. Manager GRC

Sr. Manager GRC

GRC Senior analyst

GRC Senior analyst

Global IT Security Expert - OT

Global IT Security Expert - OT

Senior Manager, Security Governance

Senior Manager, Security Governance

Information Security Engineer

Information Security Engineer

Senior IT Security Compliance Specialist

Senior IT Security Compliance Specialist

Senior Cyber Security Analyst

Senior Cyber Security Analyst

Information Security Manager*

Information Security Manager*