We're looking for a GRC Specialist to help strengthen our cybersecurity governance, risk, and compliance practices across a global organization. In this role, you'll work closely with IT, Engineering, Procurement, and business teams to ensure our security controls, third-party risk management, and compliance processes support a secure and resilient business environment.
This is an excellent opportunity to join a collaborative cybersecurity team and make a meaningful impact on the security posture of a global technology company.
What You'll Do
Supply Chain & Third-Party Security
Conduct security assessments and approvals for suppliers and third-party vendors.
Evaluate connectivity requests, network access, and security controls for internal and external integrations.
Help ensure third-party engagements align with Stratasys security policies and risk management standards.
Vulnerability Management
Support the organization's vulnerability management program through CVE monitoring, risk prioritization, and coordination of remediation activities.
Work closely with technical teams to improve software and infrastructure security and drive timely resolution of security findings.
Identity & Access Governance
Manage identity governance activities, including access reviews, permission recertification campaigns, and user lifecycle processes.
Monitor privileged and high-risk accounts and support continuous improvement of access control practices.
Security Governance & Compliance
Support security awareness initiatives across the organization.
Contribute to maintaining ISO 27001 compliance by supporting audits, control reviews, documentation, and governance activities.
Participate in continuous improvement initiatives to strengthen cybersecurity processes and controls.
What You'll Bring
4+ years of experience in Governance, Risk & Compliance (GRC), Information Security, Cybersecurity, or a related discipline.
Strong understanding of cybersecurity frameworks and standards such as ISO 27001 and NIST Cybersecurity Framework.
Hands-on experience with security technologies such as SIEM, endpoint security, DLP, vulnerability management, or similar security platforms.
Strong analytical and problem-solving skills with the ability to assess security risks and recommend practical solutions.
Experience working across multiple stakeholders and cross-functional teams.
Excellent written and verbal communication skills in English.
