Security GRC Analyst

Sinch

Stockholm, Sweden

About the role

Sinch is looking for a Security GRC Analyst (Governance, Risk & Compliance) to help strengthen and evolve our GRC function. You’ll work on building and maintaining our cybersecurity program, running risk assessments, implementing and maintaining the organization's information security program and policies.

We’re seeking someone who’s curious, proactive, and comfortable working independently. A genuine interest in security, risk and compliance will take you far in this role.

Key Responsibilities

Support the implementation and continuous improvement of the Information Security Program, including policies, standards, and procedures.
Monitor and assess the effectiveness of security controls and recommend improvements.
Conduct information security risk assessments and support the implementation of appropriate controls to protect sensitive information.
Stay current with emerging information security threats, trends, technologies, and industry practices.
Support compliance with security frameworks and standards, including ISO 27001, CIS Controls, and NIST.
Collaborate with teams across the organization, including IT, Products, HR, Legal, and other business functions, to integrate information security into processes and ways of working.
Support customer security activities, including RFx responses, audits, assessments, and security questionnaires.
Support compliance with applicable information security and cybersecurity regulations, including IMDA, Ofcom, NIS2, and the Cyber Resilience Act (CRA).
Share key audit findings with stakeholders and leadership.
Review business processes and maintain clear policies and documentation to support compliance and efficiency.
Promote awareness of compliance and information security across the organization
Act as a trusted partner in strengthening Sinch’s security posture.

About you

5+ years of experience in information security, cybersecurity, GRC, or a related field.
Degree in Information Security, IT, or a related field, or equivalent relevant professional experience.
Relevant professional certifications, such as CISSP, CISA, CISM, or CompTIA Security+, are considered an advantage.
Demonstrated experience in implementing and supporting information security programs, policies, and controls.
Strong knowledge of information security frameworks, industry standards, and best practices, including ISO 27001, CIS Controls, and NIST.
Good understanding of current information security threats, trends, technologies, and regulatory developments.
Strong communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.
Ability to work independently, take ownership of assigned activities, and drive work to completion.
Strong willingness to learn and continuously develop knowledge and skills.