IT Compliance and Security Analyst (GRC)

Overview: Job Description: Do you have a passion for interpreting policies, laws, and compliance requirements and translating them into effective GRC solutions that deliver real business value? Does working in the head office of one of the most progressive Medical Device Manufacturers sound exciting? Applied Medical gives you the opportunity to contribute to our global mission of high standards of integrity and social responsibility. As IT Compliance and Security Analyst you will be responsible for ensuring IT Applications, solutions, services, and Infrastructure are compliant against regulations and policies. Examples are GDPR, CCPA, NIS2 and the internal company information security policies. You will work closely with the IT security team and legal team, supporting other internal Applied Medical teams with security and compliance queries and projects. In this position you will contribute to defining security policies and standards. You will be a subject matter expert for compliance topics and will participate in audits. **Key Responsibilities*** Manage application/services and endpoint security standards and GDPR compliancy * Perform administrative security audits, risk assessments (SRM) and analysis. (using a GRC tool) * Act both as an advisor and sparring partner for managers within the company * Maintain a risk register and initiate/contribute to PEN tests * Manage technical initiatives to improve IT security standards Requirements: * Bachelors/HBO level education, preferably in Cybersecurity * Security certification in CEH, CISSP or CASP is preferred * Experience with reporting software such as PowerBI and Excel * Knowledgeable of ITIL practices and project management standards * Fluency in English, both written and spoken * You are accustomed to IT Security frameworks such as NIST We Offer: * An international working environment, fueled by respect and a healthy work\-life balance tailored to the business and team member’s needs * 27 paid vacation da