GRC Expert (Information Security Governance, Risk, and Compliance)

Relocation
Apply
AI Summary

We are seeking a GRC Expert to oversee and ensure our organization adheres to legal and regulatory standards, manages risks effectively, and maintains ethical governance practices. The role involves establishing and operating an information security management system, guiding the company through certification processes, and ensuring compliance with internal and external information security requirements. The ideal candidate will have a comprehensive knowledge of relevant IT service regulatory requirements and compliance standards.

Key Highlights
Establishing and operating an information security management system (ISMS)
Guiding the company through certification processes
Ensuring compliance with internal and external information security requirements
Key Responsibilities
Establishing and operating an information security management system (ISMS)
Guiding the company through certification processes
Ensuring compliance with internal and external information security requirements
Developing and implementing effective GRC policies and procedures
Performing the internal audits to ensure the compliance with the applicable standards
Managing external audit requests efficiently
Leading and managing GRC-related projects
Recording and assessing risks and deriving the resulting information security measures and key performance indicators
Technical Skills Required
ISO 27001 GDPR HIPAA NIS2 NIST
Benefits & Perks
Flexible working time
Work in an international team and versatile environment
Varied tasks with exciting and challenging IT projects
Nice to Have
CISA
CISM
CISSP

Job Description


For our European Headquarters in Frankfurt am Main area (Offenbach) we are looking for an IT professional as:


Information Security Governance, Risk, and Compliance (GRC) Expert (f/m/d)


As a GRC expert, you will become a member of the Security Technology Section. In the role of Governance, Risk, and Compliance (GRC) expert you are overseeing and ensuring that our organization adheres to legal and regulatory standards, manages risks effectively, and maintains ethical governance practices.


Key Responsibilities:


  • Establishing and operating an information security management system (ISMS) in accordance with ISO 27001.
  • Guiding the company through the certification process or maintaining existing certification.
  • Ensuring compliance with internal and external information security requirements, especially in Germany, Automotive Sector, and/or the European Union.
  • Developing and implementing effective GRC policies and procedures; Performing the internal audits to ensure the compliance with the applicable standards.
  • Managing external audit requests efficiently, ensuring adherence to external standards and regulations.
  • Leading and managing GRC-related projects, ensuring timely completion and adherence to company standards and goals.
  • Recording and assessing risks and deriving the resulting information security measures and key performance indicators.
  • Comprehensive knowledge of relevant IT service regulatory requirements and compliance standards, including GDPR, HIPAA, or other regional laws as applicable.
  • Dealing with and responding to security incidents. Following up with the relevant stakeholders to ensure the timely escalation.
  • Advising and supporting management and specialist departments on information security issues.
  • Close cooperation with the firm’s security operations department internally and externally.
  • Staying updated with the latest GRC practices, laws, and regulations.


Requirements:


  • Bachelor’s or Master’s Degree in Computer Science or comparable qualification.
  • At least 3-5 years of experience as GRC Analyst / Specialist or similar capabilities.
  • Certification ISO 27001 Implementer or Auditor
  • Knowledge of the European legal framework such as GDPR / NIS2 and NIST.
  • Comprehensive knowledge of relevant IT service regulatory requirements and compliance standards, including GDPR, HIPAA, or other regional laws as applicable.
  • Fluent in English (spoken & written).


Nice to have:

  • CISA or CISM or CISSP


Offer & Benefits:


  • Flexible working time
  • Work in an international team and versatile environment
  • Varied tasks with exciting and challenging IT projects
  • Function-specific, personal, and technology training
  • Attractive salary and excellent compensation and benefits package, including free lunch (as lunch vouchers or in the canteen), a free monthly ticket for public transportation and Gympass to support your wellbeing.
  • Relocation support



About us

Hyundai AutoEver Europe GmbH (HAEE) is a fully-owned subsidiary of the Hyundai & KIA Motor Group with its Headquarters in Seoul (South Korea). HAEE has its European Headquarters in Germany and affiliates in Slovakia and the Czech Republic.


We provide IT services that support the innovation and the IT competitiveness of the Hyundai and KIA Motors companies in various European countries, in areas like sales and manufacturing system development, implementation, and operation.


Follow us

https://www.linkedin.com/company/hyundai-autoever-europe-gmbh/


Are you IT-driven?

Embrace challenge and diversity and become part of our team!


Similar Jobs

Explore other opportunities that match your interests

Special Technical Operations (STO) System Administration Security Manager (SASM)

Cyber Security
•
3d ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

SAIC

Germany

Senior Special Technical Operations System Administration Security Manager

Cyber Security
•
5d ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

SAIC

Germany

Advanced Information Security Engineer

Cyber Security
•
1w ago
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Mid-Senior level

Starion

Germany

Subscribe our newsletter

New Things Will Always Update Regularly