GRC & Information Security Manager

Quick Facts

• Role: GRC & Information Security Manager (global responsibility)

• Focus: Governance, Risk & Compliance for information security

• Location: Prague-West office + home office

Description

The role is responsible for Governance, Risk & Compliance (GRC) for information security across an international engineering group. You will help implement ISO 27001, manage security risks, controls, audits, and corrective actions, and ensure compliance with ISO 27001, NIS2, and GDPR. The position also includes coordinating GRC activities with IT and other teams globally and gradually building a small GRC team.

Responsibilities

• Manage and develop GRC for information security

• Contribute to implementing ISO 27001

• Manage security risks, controls, audits, and remediation actions

• Oversee compliance requirements, especially ISO 27001, NIS2, and GDPR

• Coordinate GRC activities and work with IT and other teams across the global organization

• Lead and develop a smaller GRC team over time

• Report on security risks and compliance management

• Initially support day-to-day activities such as maintaining a security risk register, checking employee access permissions, preparing audit materials, completing customer security questionnaires, and assessing vendor security

Requirements

• Experience in GRC, information security, IT risk, or security governance

• Experience managing compliance or information security in an international environment

• Experience with ISO 27001 and/or NIS2

• Experience in risk management, security controls, and audits

• Experience leading people or coordinating others in project management

• Very good English for daily communication

• Advantage: information security/compliance experience in a manufacturing company

• Advantage: knowledge of cyber security in industrial systems (OT/IoT)

Benefits

• 13th salary, home office option, and additional company benefits

• Opportunity to build a globally oriented GRC position and establish your own team

• Ability to define processes and security standards across an international group