GRC Analyst

Added 12/11/2026

Hybrid work from Gdańsk (3 days from the office, 2 remotely)
Long-term, stable contract of employment

About Our Client

Acrisure is a global Fintech leader that combines the best of humans and high tech to offer multiple financial products and services to millions of businesses and individual clients. We connect clients to solutions that help them protect and grow what matters, including Insurance, Reinsurance, Cyber Services, Mortgage Origination and more.

Acrisure employs over 17,000 entrepreneurial colleagues in 21 countries and has grown from $38 million to $4.3 billion in revenue in just over ten years. Our culture is defined by entrepreneurial spirit, innovation, client centricity and an indomitable will to win.

Job Description

Support the development and continuous improvement of cybersecurity governance, policies, risk management and compliance frameworks across UE Digital Regulations and international operations.
Conduct IT and cybersecurity risk assessments, security control reviews and gap analyses; identify dependencies and practical remediation actions.
Support compliance with NIS2, DORA, GDPR and the EU AI Act; translate requirements into operational controls and recommendations.
Apply ISO/IEC 27001, ISO 22301, NIST CSF, CIS Controls and SOC 2 principles in practical security assurance and control improvement.
Support third-party risk management, vendor due diligence, business continuity, disaster recovery and operational resilience.
Collaborate with IT, Cybersecurity, Legal and business teams on technical controls, security questionnaires, certifications, remediation tracking and management reporting.

The Successful Applicant

Minimum 8 years of hands-on experience in IT Security, Cybersecurity, Information Security, IT Risk Management or GRC.
Degree in Engineering, Computer Science, IT, Cybersecurity or a related technical discipline or Social Science
Practical experience implementing or improving ISO 27001 management systems and SOC 2 controls.
Knowledge of European cybersecurity regulations, security frameworks and technical controls, including cloud security, IAM, vulnerability management and ITGC.
Practical understanding of cybersecurity frameworks and best practices, including NIST SP 800 Series, NIST CSF, CIS Controls, Cyber Essentials, ISO/IEC 27001 and COBIT, with the ability to apply them in complex, international environments.
Ability to manage and analyse large volumes of documentation, regulatory requirements and stakeholder requests across multiple business entities, ensuring accuracy, consistency, traceability and timely delivery.
Demonstrates a discreet, courteous and professional manner, with strong interpersonal skills, diplomacy and the ability to handle sensitive and confidential information with tact and integrity.