The GRC Analyst will ensure compliance with ISO 27001 (Information Security) and GDPR (Data Protection) regulations at Thriva. This role supports the development and implementation of GRC frameworks, policies, and procedures to manage organizational risks, with potential growth into areas like ISO 13485 (medical devices) and clinical safety.

Responsibilities:

Develop and implement security and data protection policies and procedures.
Streamline compliance processes and reduce duplication.
Assess and manage risks, maintaining an updated risk register.
Assist with incident management and investigations.
Monitor and apply threat intelligence.
Promote data protection by design through DPIAs.
Maintain the Record of Processing Activities (ROPA).
Provide training to staff on security and compliance practices.

Qualifications:

2+ years in a GRC, information security, or data protection role.
Strong knowledge of ISO 27001 and GDPR requirements.
Experience in conducting risk assessments and risk analysis.
Excellent communication skills for both technical and non-technical audiences.
Ability to work independently and as part of a team.
Strong attention to detail and problem-solving skills.

Governance, Risk and Compliance (GRC) A...