Your personal AI career agent
GRC Analyst(m/w/x)
Managing evidence collection and coordinating audits for an AI employee experience platform. ISO 27001 and SaaS operations experience required. E-Gym-Wellpass membership, job bike leasing, and EU work abroad options.
Requirements
- 2–4 years GRC or Information Security experience
- Strong ISO 27001 and other framework experience
- Manage policy lifecycle and risk registers
- Understand SaaS operations and translate compliance
- Excellent English and German communication
- B2B SaaS or tech start-up background
- Familiarity with GRC tooling or compliance platforms
- Experience working with engineering teams
Tasks
- Manage evidence collection
- Coordinate internal and external audits
- Collect and package evidence trail
- Present evidence to auditors
- Manage auditor walkthroughs
- Handle finding remediations
- Administer ISMS for ISO 27001/27017/27018
- Manage TISAX assessments
- Oversee SOC 2 Type II controls
- Handle Cyber Essentials Plus recertification
- Maintain risk register
- Coordinate quarterly risk reviews
- Manage risk treatment plans
- Draft and version-control policies
- Assist with data privacy operations
- Support RoPA and DPAs
- Handle Data Subject Requests under GDPR
- Act as liaison between security and control owners
- Translate compliance requirements into actionable tasks
- Plan and deliver security training
- Conduct phishing simulations
- Maintain Trust Centre content
- Transform internal security info into client-facing documents
Work Experience
- 2 - 4 years
Education
- High school diploma
Languages
- English – Business Fluent
- German – Business Fluent
Tools & Technologies
- ISO 27001
- TISAX
- SOC 2
- Cyber Essentials Plus
- GRC tooling
- audit management platforms
- compliance automation tools
Benefits
Healthcare & Fitness
- E-Gym-Wellpass membership
Company Bike
- Job bike leasing
Workation & Sabbatical
- Work abroad in EU
Flexible Working
- Remote work
Not a perfect match?
- Flip AppFull-timeWith HomeofficeExperiencedStuttgart, Berlin
- Mercedes-Benz.io GmbH
Compliance and Data Compliance Officer(m/w/x)
Full-timeWith HomeofficeExperiencedStuttgart - dgrp Diconium Group GmbH
Information Security Manager(m/w/x)
Full-timeWith HomeofficeManagementStuttgart - Devoteam
Senior oder Lead ServiceNow GRC Consultant(m/w/x)
Full-timeWith HomeofficeSeniorStuttgart - Bertrandt
Security Analyst(m/w/x)
Full-timeWith HomeofficeExperiencedStuttgart
GRC Analyst(m/w/x)
Managing evidence collection and coordinating audits for an AI employee experience platform. ISO 27001 and SaaS operations experience required. E-Gym-Wellpass membership, job bike leasing, and EU work abroad options.
Requirements
- 2–4 years GRC or Information Security experience
- Strong ISO 27001 and other framework experience
- Manage policy lifecycle and risk registers
- Understand SaaS operations and translate compliance
- Excellent English and German communication
- B2B SaaS or tech start-up background
- Familiarity with GRC tooling or compliance platforms
- Experience working with engineering teams
Tasks
- Manage evidence collection
- Coordinate internal and external audits
- Collect and package evidence trail
- Present evidence to auditors
- Manage auditor walkthroughs
- Handle finding remediations
- Administer ISMS for ISO 27001/27017/27018
- Manage TISAX assessments
- Oversee SOC 2 Type II controls
- Handle Cyber Essentials Plus recertification
- Maintain risk register
- Coordinate quarterly risk reviews
- Manage risk treatment plans
- Draft and version-control policies
- Assist with data privacy operations
- Support RoPA and DPAs
- Handle Data Subject Requests under GDPR
- Act as liaison between security and control owners
- Translate compliance requirements into actionable tasks
- Plan and deliver security training
- Conduct phishing simulations
- Maintain Trust Centre content
- Transform internal security info into client-facing documents
Work Experience
- 2 - 4 years
Education
- High school diploma
Languages
- English – Business Fluent
- German – Business Fluent
Tools & Technologies
- ISO 27001
- TISAX
- SOC 2
- Cyber Essentials Plus
- GRC tooling
- audit management platforms
- compliance automation tools
Benefits
Healthcare & Fitness
- E-Gym-Wellpass membership
Company Bike
- Job bike leasing
Workation & Sabbatical
- Work abroad in EU
Flexible Working
- Remote work
About the Company
Flip GmbH
Industry
IT
Description
The company aims to be the world's most used AI employee experience platform, revolutionizing the work lives of frontline workers.
Not a perfect match?
- Flip App
GRC Analyst(m/w/x)
Full-timeWith HomeofficeExperiencedStuttgart, Berlin - Mercedes-Benz.io GmbH
Compliance and Data Compliance Officer(m/w/x)
Full-timeWith HomeofficeExperiencedStuttgart - dgrp Diconium Group GmbH
Information Security Manager(m/w/x)
Full-timeWith HomeofficeManagementStuttgart - Devoteam
Senior oder Lead ServiceNow GRC Consultant(m/w/x)
Full-timeWith HomeofficeSeniorStuttgart - Bertrandt
Security Analyst(m/w/x)
Full-timeWith HomeofficeExperiencedStuttgart