Senior Security GRC Expert (all genders) at Zalando
London, London - England, United Kingdom -
Full Time


Start Date

Immediate

Expiry Date

26 Jan, 27

Salary

43000.0

Posted On

28 Oct, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Yes

Skills

Industry

Information Technology & Services

Description

WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)


  • Manage Security Compliance: Implement, maintain, and continuously improve the information security compliance framework. Experience with Secure Controls Framework (SCF) is a plus.
  • Ensure Regulatory Adherence: Monitor, enforce, and advise on compliance with DORA, GDPR, PCI-DSS, SOC2, NIS2, CRA, and other relevant regulations.
  • Develop Security Governance: Contribute to the creation, review, and upkeep of information security policies, procedures, and controls.
  • Drive Risk Management: Design, implement, and maintain the information security risk management framework for projects, systems, and processes.
  • Measure Risk Management Effectiveness: Develop KPIs to track the effectiveness of risk management efforts.
  • Report to Leadership: Prepare and present regular reports on security risks, compliance, and improvements.

WE'D LOVE TO MEET YOU IF


  • You have 6+ years of experience working in Security Governance, Risk and Compliance functions.
  • You demonstrate strong communication skills and good interpersonal skills.You can communicate security risk-related concepts to technical and nontechnical audiences.
  • You have experience in interpreting and implementing security and privacy regulations and frameworks (e.g., NIST CSF, GDPR, ISO 2700x, SOC 2, PCI DSS, NIS2, CRA) into actionable security operational requirements.
  • You have a familiarity with the Secure Control Framework (SCF).
  • You have exceptional attention to detail, strong program/project management skills, analytical proficiency, and experience in operationalizing and developing scalable security processes in complex environments.
  • You have security certifications (e.g. CISSP, CRISC, CISM, ISO 27001 Lead Auditor/Implementer) as a plus.

OUR OFFER


Zalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.


  • 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days)
  • 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners
  • Family support, including counselling and dedicated services for parents and carers
  • Company pension scheme

Responsibilities
Loading...