Senior Security GRC Expert (all genders)

Role: Senior Security GRC Expert in the Information Security - Security Risk & Governance Team. You will safeguard trust for customers, stakeholders, and employees by identifying, assessing, and managing security risks, influencing the security posture of internal applications and third-party relationships. You will be the go-to expert and key architect of the evolving Security Risk Management process, translating complex business requirements into clear security operational solutions. Responsibilities: - Manage Security Compliance: Implement, maintain, and improve the information security compliance framework (Secure Controls Framework (SCF) experience is a plus). - Ensure Regulatory Adherence: Monitor, enforce, and advise on compliance with DORA, GDPR, PCI-DSS, SOC2, NIS2, CRA, and other regulations. - Develop Security Governance: Contribute to creation, review, and upkeep of security policies, procedures, and controls. - Drive Risk Management: Design, implement, and maintain the security risk management framework for projects, systems, and processes. - Measure Risk Management Effectiveness: Develop KPIs to track effectiveness. - Report to Leadership: Prepare and present regular reports on security risks, compliance, and improvements. Qualifications: - 6+ years in Security Governance, Risk, and Compliance. - Strong communication and interpersonal skills; ability to explain security risks to technical and non-technical audiences. - Experience interpreting and implementing security/privacy regulations (NIST CSF, GDPR, ISO 2700x, SOC 2, PCI DSS, NIS2, CRA) into actionable requirements. - Familiarity with Secure Control Framework (SCF). - Exceptional attention to detail, program/project management skills, analytical proficiency, and experience in operationalizing scalable security processes. - Security certifications (CISSP, CRISC, CISM, ISO 27001 Lead Auditor/Implementer) are a plus. What We Offer: - 27 days holiday (increasing to 30), 40% off fashion/beauty products, 30% off Lounge by Zalando, discounts from external partners. - Family support, company pension scheme, employee shares programme, health and wellbeing options (Wellhub), mental health support and coaching. - Development through training platform and biannual peer-to-peer review, 2 paid volunteering days, relocation assistance (subject to agreement).