Cyber GRC Analyst

About the role

Codertal is seeking an experienced Cyber Governance, Risk & Compliance (GRC) Analyst to support a major European airline’s cyber security team. Working remotely on a long‑term B2B contract, you will collaborate with senior stakeholders across cyber, risk, and technology to strengthen the organisation’s security posture.

Key responsibilities

• Conduct third‑party risk assessments for suppliers and partners.
• Perform cyber risk assessments across systems, processes, and projects.
• Support cyber resilience governance, including business continuity, disaster recovery, and cyber recovery.
• Monitor compliance against internal standards and regulatory frameworks such as NIS2, GDPR, NIST CSF.
• Execute security control testing and produce evidence‑based reports.
• Assist with internal and external audits, regulatory inspections, and policy lifecycle management.
• Collaborate with technology owners to remediate findings and treat risks.
• Track and report cyber posture metrics and contribute to continuous improvement of GRC processes.

Required profile

• 5+ years of experience in cyber security, risk management, or technology assurance.
• Hands‑on experience with control testing, risk assessments, and compliance activities.
• Strong understanding of risk management principles and third‑party risk management.
• Familiarity with regulatory frameworks such as NIST, ISO 27001, CIS, and GDPR.
• Experience supporting audits, project/change assurance, or structured testing.

Required skills

• NIST framework
• ISO 27001
• CIS controls
• GDPR
• Business Continuity Management (BCM)
• Disaster Recovery (DR)
• SureCloud
• Archer
• ServiceNow GRC