IT Security Governance, Risk, and AssuranceWe believe that we make a difference every day. Our people are accountable for delivering world-class service and they are passionate about making the world a safer and more secure place.

Your role will also support the implementation of our organization’s strategies around Cyber & IT controls by maintaining and developing new ways of doing things and creating cross-functional business relationships within Technology and other business units.The position is expected to work with internal stakeholders and take a supportive role in analysing key risks, establishing regular dialogue between risk and control owners to identify areas for improvement and develop strategies to enhance security of IT and business processes.Main ResponsibilitiesFocus on building and maintaining the Audit function within Information Security. Manage and mature the Information Security & IT risk control framework to enable effective operation and monitoring of controls.Document and report control failures and gaps to stakeholders. Provide remediation guidance and occasionally drive projects to ensure deployment of mitigation actions.Develop security policies, standards, and procedures to drive standardization and centralization of control activities.Perform risk assessment activities across the organization, identify potential risks within IT and business processes, and recommend risk mitigation strategies and controls.Ensure risks and remediation plans are regularly addressed and implemented by risk and control owners.Audit and document processes and prepare reports summarizing findings and insights for management and stakeholders.Required QualificationsBachelor’s degree within a relevant field and at least 4 years of direct experience within Information Security & IT risk and compliance.Experience working in GRC departments and direct experience working in:​Defining, creating,



and executing of an Information Security & IT risk control framework, not only internally but also for third-party and partners.

Performing information Information Security & IT assessments and conducting compliance and maturity assessments using international standards and best practices from various industries.

Performing Information

Security & IT controls audits and executing remediation plans not only internally but also third party and partners.Demonstrated planning and problem-solving skills and ability to analyze complex technical issues.Thorough understanding of market structures, including relevant regulatory compliance requirements (SOC 2, NIST, GDPR, COBIT, ITIL, etc.).Experience organizing and carrying out risk assessments and compliance projects.Fluent written and verbal communication skills in English.CISSP, CRISC, CISM, CISA, Security+, ISO 27001Proficient with MS Office, project management, and at least one GRC tool (recommended).Familiarity with auditing, monitoring, controlling, and process assessment.Peace of mind for families and small businesses - We believe it is a human right to feel safe and secure. Our service includes 24/7 monitoring, expert verification and response, customer care, service and maintenance services, and professional technical support. Verisure people are dedicated and committed and provide what we believe is the best customer service in the industry.We attract high quality customers.

A technology-enabled human services company - Our ~29,000 team-mates are the foundation of our company. Our business model combines technology and human expertise to protect people. We are a human services company.

This connection provides the insight that inspires our innovation. We leverage these insights with the significant investment we make into product and service innovation. We are an international company with offices and colleagues in multiple countries.

If you have questions regarding this position, please reach out to our Group Talent Acquisition Lead, luka.

📌 Information Security Analyst (RIsk) (Pozuelo de Alarcón)
🏢 Verisure
📍 Pozuelo de Alarcón