Cyber Security GRC Analyst

Flow Traders is looking for a Cyber Security GRC Analyst to join its growing Security team in Amsterdam, with a focus on governance, risk management, and compliance.

Requirements

• Bachelor’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 2–5 years of experience in information security governance, risk, or compliance roles.
• Knowledge of ISO/IEC 27001, SOC 2, and regulatory frameworks (e.g., GDPR, DORA).
• Experience with security frameworks (e.g., CIS Controls, NIST CSF, COBIT).
• Strong project management, communication, analytical, and documentation skills.
• Experience supporting audits (internal, external, financial, certification) is a plus.
• Familiarity with GRC platforms (e.g., ServiceNow GRC, Drata, Vanta, OneTrust) is a plus.
• Certifications (e.g., CISA, CRISC, ISO 27001 Lead Implementer/Auditor) are a plus.
• Understanding of financial sector regulations, operational resilience (DORA, NIS2), and threat modeling is a plus