GRC Analyst (Information Security)

About the role

Cognism, a European B2B data and sales intelligence provider, is hiring a GRC Analyst to run and strengthen its governance, risk and compliance programme. The role supports ISO 27001 and SOC 2 frameworks, owns evidence collection and control tracking, and works closely with Engineering, IT Operations and Compliance. The position is based in Croatia.

Key responsibilities

• Support day-to-day GRC operations, including control monitoring and audit readiness
• Maintain and improve documentation such as policies, procedures, risk registers and control mappings
• Support internal and external audits, questionnaires and vendor risk assessments
• Take a risk-based approach to prioritising work and effort allocation
• Partner with Engineering, IT Operations and Compliance to track remediation closure
• Identify and implement process improvements for efficiency and automation
• Stay current on emerging risks, including AI-related exposures, and flag AI risk intersections with existing controls

Required profile

• 1-2 years of experience in security, GRC, IT audit or a related risk function
• Detail-oriented and process-driven, able to build documented, repeatable processes
• Strong written and verbal communication, able to explain risk and compliance to technical and non-technical audiences
• Comfortable working across Engineering, IT Operations and Compliance teams
• Curious about AI risks and willing to ask questions in ambiguous situations

Required skills

• Working knowledge of ISO 27001 and/or SOC 2 fundamentals
• Strong plus: working knowledge of AI security and risk