Offer summary

(Summary generated by AI based on the full job description)

The project focuses on implementing and improving information security governance in an international context, with emphasis on EU regulatory compliance. Required practical knowledge includes ISO/IEC 27001, SOC 2, NIST CSF and CIS Controls, and experience with cloud, IAM, vulnerability management and ITGC. Responsibilities cover risk assessments, control reviews, applying NIS2, DORA, GDPR, EU AI Act requirements, third‑party risk, business continuity, and collaboration with IT, legal and business teams. Offered: permanent contract, 10% yearly bonus, private healthcare, life insurance and a benefits platform.

new

GRC Analyst

Company: Michael Page

from: 12 November 2026
to: 12 December 2026
salary not specifiedcontract of employment (full-time)
Offer parameters
level:senior
working mode:hybrid
location:Gdańsk, Pomeranian
Gdańsk, Pomeranian

Requirements

Expected technologies

Nuxt.js

Our requirements

  • Minimum 8 years of hands-on experience in IT Security, Cybersecurity, Information Security, IT Risk Management or GRC.
  • Degree in Engineering, Computer Science, IT, Cybersecurity or a related technical discipline or Social Science
  • Practical experience implementing or improving ISO 27001 management systems and SOC 2 controls.
  • Knowledge of European cybersecurity regulations, security frameworks and technical controls, including cloud security, IAM, vulnerability management and ITGC.
  • Practical understanding of cybersecurity frameworks and best practices, including NIST SP 800 Series, NIST CSF, CIS Controls, Cyber Essentials, ISO/IEC 27001 and COBIT, with the ability to apply them in complex, international environments.
  • Ability to manage and analyse large volumes of documentation, regulatory requirements and stakeholder requests across multiple business entities, ensuring accuracy, consistency, traceability and timely delivery.
  • Demonstrates a discreet, courteous and professional manner, with strong interpersonal skills, diplomacy and the ability to handle sensitive and confidential information with tact and integrity.

Your responsibilities

  • Support the development and continuous improvement of cybersecurity governance, policies, risk management and compliance frameworks across UE Digital Regulations and international operations.
  • Conduct IT and cybersecurity risk assessments, security control reviews and gap analyses; identify dependencies and practical remediation actions.
  • Support compliance with NIS2, DORA, GDPR and the EU AI Act; translate requirements into operational controls and recommendations.
  • Apply ISO/IEC 27001, ISO 22301, NIST CSF, CIS Controls and SOC 2 principles in practical security assurance and control improvement.
  • Support third-party risk management, vendor due diligence, business continuity, disaster recovery and operational resilience.
  • Collaborate with IT, Cybersecurity, Legal and business teams on technical controls, security questionnaires, certifications, remediation tracking and management reporting.
Company

What we offer

  • Permanent employment contract.
  • Yearly 10% bonus
  • Private healthcare package with Luxmed
  • Life insurance with Unum
  • MyBenefit cafeteria platform
  • Real career growth and learning opportunities within a global organization

Recruitment for

Acrisure is a global Fintech leader that combines the best of humans and high tech to offer multiple financial products and services to millions of businesses and individual clients. We connect clients to solutions that help them protect and grow what matters, including Insurance, Reinsurance, Cyber Services, Mortgage Origination and more.
Acrisure employs over 17,000 entrepreneurial colleagues in 21 countries and has grown from $38 million to $4.3 billion in revenue in just over ten years. Our culture is defined by entrepreneurial spirit, innovation, client centricity and an indomitable will to win.
GRC Analyst
I apply to:
Michael Page
Gdańsk, Pomeranian
Pracodawca zbiera zgłoszenia przez swój system.
Przejdziesz na zewnętrzny formularz.

By clicking "Aplikuj" you confirm that you've read and accepted our Terms and Conditions.


This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Need more information?

  • Make sure the body of the offer doesn’t already include what you’re looking for.
  • Ask a question if you need more information you’re interested in.
  • We’ll forward your question to the employer and aim to provide a response within 3 business days.

Share this offer