GRC Analyst — Information Security ...

As a GRC Analyst in Information Security at METRO Global Solution Center India, you will work closely with METRO’s onshore GRC team in Düsseldorf to support strategic initiatives. Your role involves conducting analyst-level work in ISMS development, AI governance, NIS2 readiness, supplier risk, and policy frameworks. Key responsibilities include drafting policy excerpts, conducting desk research on frameworks and regulations, preparing data summaries for stakeholder meetings, and maintaining shared workspaces. You will also handle ad-hoc tasks, ensuring transparency in progress, blockers, and risks. Ideal candidates should have 2–4 years of experience in GRC, IT audit, or information security, with knowledge of ISO/IEC 27001 or comparable frameworks. Strong written English and proficiency in Microsoft 365 and GRC platforms (e.g., ServiceNow, Archer) are essential. Certifications like ISO 27001 Foundation or CompTIA Security+ are a plus.