03 oct
|
AlleyCorp
|
España
About the team & the role:
The Information Security Governance & Assurance function at FYUL is deliberately small and execution-focused. The Cybersecurity Governance & Assurance Manager is responsible for strategy, stakeholder relationships, and cross-functional communication; this senior analyst role, reporting directly to the manager, is responsible for its execution: audits, evidence, vendor security, and the automation of GRC operations. This is an individual-contributor position where professional growth comes from depth of expertise and ownership of outcomes.
Printful & Printify hold active ISO 27001 and other certifications. The primary mandate of this role is to maintain and strengthen this certified posture, ensure the continuity of ongoing audit cycles, and extend the same governance standard to additional frameworks as the company's needs evolve.
Your responsibilities:
- Audit management. Plan and execute internal and external audit activities across ISO 27001, SOC 2, and related frameworks: evidence collection, control readiness,
direct communication with external auditors, and follow-through on findings until closure. Represent the function confidently in audit interactions, including the ability to decline inappropriate requests in a professional and well-substantiated manner.
- GRC automation. Design and implement automation for evidence collection and recurring compliance activities; apply compliance-as-code practices where they deliver measurable value; leverage AI-based agents and workflows to reduce manual effort. Maintain working knowledge of the commercial GRC platform landscape and prefer established industry solutions over custom development.
- Vendor security operations. Conduct security assessments of third-party vendors during onboarding and annual reviews, with continuous improvement of the process's efficiency.
- Risk management. Maintain the risk register: perform risk assessments, track remediation plans, and ensure timely closure of
📌 Senior GRC Analyst (España)
🏢 AlleyCorp
📍 España