GRC Analyst

The Information Security Officer for GRC and Awareness will play a critical role in ensuring effective implementation and continuous adherence to policies and procedures. You will be responsible for maintaining and enhancing Governance, Risk, and Compliance (GRC) programs to align with legal, regulatory, and contractual requirements. Regular evaluation and improvement of information security controls to address evolving business and threat landscapes will be a key focus. Leading ongoing information security training and awareness programs is essential to strengthen the organizational security culture. Collaboration with IT and other departments will be necessary to integrate security measures into all business processes. Additionally, you will coordinate asset management, Business Impact Assessments, and risk assessments to identify vulnerabilities and update mitigation strategies as needed. Providing up-to-date security reports to the CISO and other stakeholders, as well as conducting third party risk assessments, are crucial aspects of the role. Key tasks will include reviewing and updating security policies and procedures, refining the GRC framework for operational efficiency and compliance with current standards, and planning, coordinating, and following up on risk activities to mitigate identified risks effectively. Developing and delivering engaging security training sessions tailored to current security challenges, conducting third party security reviews, and serving as a liaison for integrating security practices across departmental operations are also part of the responsibilities. Compiling and communicating security performance and status reports effectively to all relevant stakeholders, as well as planning, coordinating, and following up on the management and implementation of security projects to ensure alignment with organizational security goals, will be critical tasks. The ideal candidate will have a Bachelor's degree or higher in Information Security, Computer Science, or a related field, along with at least 5 years of experience in information security management or Cyber risk governance. Possessing relevant security certifications such as CISSP, CRISC, etc., is considered an advantage. Strong project leadership and communication skills, proficiency in English (both written and verbal), experience working with security frameworks and standards like CIS18, ISO27001, and developing/conducting security training and awareness programs are also desired qualifications. Joining the team will offer you a forefront role in cybersecurity within the chemical industry and a dynamic, inclusive work environment that emphasizes work-life balance. Professional growth opportunities in a supportive and collaborative team setting await you at Hempel. If you are passionate about security and eager to contribute to a high-performing team, we encourage you to apply with your CV and cover letter in English. At Hempel, diversity brings strength to the workplace, and we are dedicated to ensuring that everyone feels valued and supported in our collaborative work environment. Join us in shaping a brighter future with sustainable coating solutions and unleash your full potential! Application Deadline: 2025-06-14 Seniority Level: Mid-Senior level Job Function: Information Technology Industry: Chemicals,