Junior IT GRC Specialist

Governance, Risk & Compliance (GRC) Specialist

About

This role is focused on contributing to the security and future viability of the company by shaping and optimizing central processes in Governance, Risk & Compliance (GRC). The company values One Team, Innovation & Transformation, Ownership, Entrepreneurship, and Empowerment. They offer hybrid work (2 days/week home office), a strong culture of open communication and mutual support, personal development opportunities, and various benefits including a corporate benefits platform, subsidized DeutschlandTicket, EGYM WellPass, employee discounts, a monthly shopping voucher, and bicycle leasing.

Responsibilities

• Be responsible for the implementation, further development, and maintenance of specific processes in Governance, Risk, and Compliance, ensuring legal and internal requirements are met efficiently and sustainably.
• Actively support internal and external audits, from preparation and execution to follow-up of measures, working closely with auditors and relevant departments.
• Participate in the planning, coordination, and monitoring of all GRC-relevant activities, both internally and with international teams and partners.
• Contribute to the continuous development and adaptation of information security and GRC systems to meet current and future requirements, standards, and best practices.
• Plan, document, and communicate measures and controls in the GRC environment, providing important decision-making bases for management and supporting continuous improvement.

Requirements

• Completed Bachelor's degree in Information Technology, Cybersecurity, or a comparable field.
• Ideally, practical experience in the GRC environment.
• Proven experience working with GRC processes and relevant tools, including integrating them into existing structures.
• In-depth knowledge of relevant compliance frameworks such as ISO 27001, PCI-DSS, NIS2, or DORA.
• Analytical approach to challenges, ability to quickly recognize interrelationships, and find solution-oriented approaches.
• Confident communication in German and English, both verbally and in writing, with colleagues and international teams/partners.