Senior IT Security GRC Specialist

EcoVadis is focused on security as a product feature and a primary driver of customer trust and satisfaction. The role involves safeguarding assets and global reputation, acting as a strategic partner to sales and product teams, and designing a world-class GRC program aligned with strategic goals.

• Fluent written and spoken English
• 5+ years of experience in GRC positions
• Exceptional ability to build stakeholder relationships and translate technical risks into business impact
• Ability to align and guide peers/junior staff through influence and technical authority
• High degree of autonomy to drive complex GRC projects independently
• Strong understanding of GRC frameworks, methodologies, and best practices
• Knowledge of relevant laws, regulations, and industry standards
• Hands-on experience creating, maintaining, and improving compliance programs based on multiple standards or regulations (e.g. ISO 27001, SOC2)
• Practical experience using AI to streamline compliance workflows and understanding of AI risks
• Strong analytical and problem-solving skills
• Ability to conduct research and deliver security guidelines and improvements
• Hands-on experience with Google Workspace is a plus

• Develop and implement GRC strategy
• Ensure regulatory and industry standards compliance
• Support business processes
• Provide strategic guidance
• Ensure functional supervision
• Deliver IT security reporting
• Implement AI-powered GRC operations

Offer available only for candidates eligible to work and live in Poland. Location: Hybrid in Warsaw (4 days per month in the office) / Full remote from Poland.