As a Digital Security and Compliance Analyst, you will support Digital Security and Compliance activities, including risk assessment, compliance monitoring, audit support, security reviews and awareness initiatives.

You will work with cross-functional teams to help identify risks, document findings, follow up on remediation actions and promote security best practices.

KEY ACCOUNTABILITIES

1. Compliance with Security policies/standards

• Support compliance with security policies and standards.
• Help document gaps, exceptions and remediation actions.
• Contribute to compliance with ISO 27001, GDPR, DORA and EU AI Act.

2. Risk Assessment

• Support risk assessments and vulnerability identification.
• Document risks, controls and mitigation actions.
• Follow up on remediation with stakeholders.

3. Technology/Security Review

• Assist in reviewing digital solutions, cloud environments and technical requests.
• Document findings and recommendations.
• Escalate complex or high-risk topics.

4. Audit support

• Support internal and external audits.
• Collect evidence and security documentation.
• Track findings and remediation actions.

5. Compliance Monitoring & Reporting

• Support compliance monitoring activities.
• Help prepare reports, dashboards and status updates.
• Maintain compliance documentation.

6. Client Inquiry and Compliance Management

• Support responses to RFPs, RFIs and due diligence requests.
• Gather required information from internal teams.
• Escalate complex client requests.

7. Training & Awareness Programs

• Support awareness materials and campaigns.
• Promote security and compliance best practices.

8. Knowledge Management

• Help maintain security policies, procedures and templates.
• Support documentation updates and process improvements.

TECHNICAL SKILLS & QUALIFICATIONS

• Knowledge of ISO 27001 and ISO 27005 principles.
• Basic understanding of Information Security, IT Risk, Compliance and Security Governance.
• Familiarity with GDPR, DORA or EU AI Act is a plus.
• Basic knowledge of IT environments: infrastructure, cloud, applications and data protection.
• Good documentation, reporting and communication skills.
• Organized, collaborative, detail-oriented and willing to learn.
• Ability to manage multiple tasks and escalate when needed.

EXPERIENCE & KNOWLEDGE

• Bachelor’s or Master’s degree in Cybersecurity, IT, Risk, Compliance, Audit or related field.
• Around 2 to 3 years of experience in Information Security, IT Compliance, IT Risk, Cybersecurity or IT Audit.
• Knowledge of ISO 27001 and ISO 27005 is expected.
• Certification or hands-on implementation experience in ISO 27001 / ISO 27005 is not required.
• Initial exposure to risk assessment, compliance monitoring, audit support or security documentation is a plus.