Mid-Level GRC Engineer – Cyber Security

About the role

Axis is looking for a motivated mid-level Governance, Risk and Compliance (GRC) Engineer to join its cybersecurity team. You will help build and maintain the GRC framework that ensures the company meets regulatory, standards-based and internal security requirements.

Key responsibilities

• Develop, implement and maintain GRC policies, standards and procedures.
• Conduct risk assessments across business functions and IT systems, identifying and evaluating vulnerabilities.
• Monitor compliance with regulations such as GDPR, PCI DSS, ISO 27001, CIS and SOC 2, and track remediation.
• Support internal and external audits, gather evidence, document findings and follow up on corrective actions.
• Assist in creating and delivering GRC awareness and training programs.
• Implement and manage GRC tools and technologies, and produce regular reports and dashboards for management.
• Collaborate with IT, Legal, HR and other teams to align GRC activities with business objectives.
• Participate in business continuity, disaster recovery planning and third-party risk assessments.
• Develop and maintain security metrics and key performance indicators.

Required profile

• Bachelor’s degree in IT, Cybersecurity or a related field.
• 2-3 years of experience as a GRC analyst/engineer, information security analyst or IT auditor.
• Strong understanding of GRC principles, frameworks and relevant regulations.
• Experience conducting risk assessments and identifying control gaps.
• Familiarity with audit processes and methodologies.
• Excellent analytical and problem-solving abilities with attention to detail.

Required skills

• Knowledge of PCI DSS, CIS, SOC 2, NIST frameworks.
• Understanding of GDPR, ISO 27001 compliance requirements.
• Risk assessment and mitigation techniques.
• Audit methodology and evidence collection.
• Experience with GRC tools and security metrics.