GRC Specialist

About the role

GRC Specialist to execute the day-to-day work that keeps our compliance and risk programs running — from responding to customer security questionnaires to supporting audits and assessing vendor risk. You'll work closely with Engineering, IT, Sales and Customer Success to turn security and compliance requirements into clear, evidenced answers, while the GRC Lead sets overall program strategy and priorities.

What you'll do

• Customer RFP & Security Questionnaire Response — Own end-to-end responses to inbound customer RFPs, RFIs, and CAIQs, coordinating with internal teams to gather accurate
• Risk Assessment & Management — Conduct risk assessments and control validation testing against frameworks such as SOC 2, ISO 27001, and NIST; maintain the risk register
• Audit & Compliance Support — Support the full lifecycle of SOC 2 and ISO 27001 audits, including evidence collection, control walkthroughs, and remediation tracking
• Third-Party & Vendor Risk Management — Conduct vendor security assessments and review vendor questionnaire responses to evaluate third-party risk posture
• Trust Centre Maintenance — Keep customer-facing certifications, policies, and security documentation current and accurate

What you need

• 4–5 yrs of experience
• ISO 27001
• Compliance
• Data privacy
• Risk management
• Customer success
• Any graduate

Good to have

• AWS
• GCP
• Azure