GRC Specialist

Description

Job Summary: We are seeking a Senior GRC Specialist with ISO 27001 experience to lead governance, risk, and compliance initiatives and ensure organizational compliance. Key Highlights: 1. Lead governance, risk, and compliance initiatives 2. Implementation and maintenance of Information Security Management Systems 3. Focus on excellence, integrity, and collaboration **About Us:** At Sourcing Trust, we are committed to delivering innovative, reliable, and customized technology solutions that empower businesses to thrive in a rapidly evolving digital landscape. With a focus on excellence, integrity, and collaboration, we build lasting partnerships by understanding the unique needs of each client and providing specialized support across all stages. Our team is dedicated to fostering a positive and inclusive work environment where every employee's contribution is valued, encouraging continuous growth, learning, and shared success. Join us and become part of a passionate organization driven by innovation and excellence. **About the Role:** We are looking for a Senior GRC Specialist with deep expertise in ISO 27001 to lead governance, risk, and compliance initiatives in Porto. The role focuses on implementing and maintaining Information Security Management Systems (ISMS), conducting risk assessments, managing audits, and ensuring organizational compliance with cybersecurity standards. **Requirements:** * Senior experience (4+ years) in **GRC roles**, with proven projects involving ISO 27001 implementation and certification * Expertise in **ISO 27001 frameworks**: ISMS design, implementation, internal audits, and certification processes. * Experience in **risk assessments, control implementation, and gap analysis** aligned with ISO 27001 Annex A * Strong knowledge of **regulatory compliance (GDPR, NIS2)** and **cybersecurity frameworks (NIST, CIS Controls)** * Proven experience managing **GRC tools/platforms and reporting to executive stakeholders** * Demonstrated experience in **audit preparation and coordination with certification bodies** * Excellent **documentation skills** for policies, procedures, and compliance evidence.