Information Security GRC Specialist (f/m/d)
As an Information Security GRC Specialist at Awin, you will lead the global Information Security Risk Management function, ensuring the organization comprehends and mitigates its security risks effectively. This role involves embedding a culture of risk ownership, proactively identifying gaps, and driving remediation efforts to completion. You will serve as an advisor to senior leadership and the board, ensuring that risk appetite is clearly defined, actively utilized in decision-making, and consistently monitored.
Key responsibilities include leading enterprise-wide risk identification and assessment across strategic initiatives, technology, and third parties. You will prioritize risks, articulate them in business terms, and drive remediation efforts, holding risk owners accountable and escalating issues as necessary. Maintaining the Information Security Risk Register, defining and embedding the organization's risk appetite, and providing actionable risk insights to senior management are also critical aspects of this role.
The ideal candidate will have a proven track record of delivering risk management initiatives end-to-end and experience driving risk remediation across teams without direct authority. Strong experience presenting and defending risk positions to senior leadership and boards, hands-on experience within an ISO 27001-certified ISMS environment, and knowledge of frameworks such as ISO 27001 are essential. Additionally, experience designing, implementing, or improving control frameworks and proficiency with GRC platforms like Hyperproof are required. Excellent English communication skills and the ability to build relationships and influence senior stakeholders are also important.
Awin offers a flexible four-day workweek at full pay, with no reduction to your annual holiday allowance, prioritizing mental health and well-being. A remote working allowance is provided to cover part of your running costs, along with support in setting up your remote workspace. The company fosters an international culture with flexibility through its Flexi-Office and hybrid/remote work possibilities across Awin regions. Development opportunities are available through the Awin Academy, covering a wide range of skills for professional and personal growth. Additionally, a peer-to-peer program allows colleagues to thank and reward each other with vouchers.
Established in 2000, Awin prides itself on a dynamic, social, and inclusive culture. The company has adapted to nurture its culture in a virtual environment, bringing colleagues together globally for various social activities. Diversity and inclusion are paramount, with a commitment to hiring diverse team members and championing uniqueness and authenticity. Awin welcomes all backgrounds, identities, and experiences, aiming to build the world's leading open partner ecosystem. If you need support during the application or interview process, please let the company know.