{"id":55311,"title":"Senior Security GRC Expert (all genders)","company":"Zalando","city":"Berlin","region":"Berlin","location":"Berlin, Berlin","work_model":"unknown","employment_type":"unknown","employment":["full_time"],"visa":"not_mentioned","relocation":"offered","posted_at":"2026-11-03T18:09:14.414000+00:00","tools":["SOC","ISO 27001"],"seniority":"senior","years_experience_min":6,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"not_mentioned","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules+llm","language_badge":"Not stated","language_evidence":null,"requirements_snippet":"6+ years in security governance, risk and compliance; strong communication skills; experience turning security and privacy frameworks into operational requirements. Security certifications such as CISSP or CISM are a plus.","url":"https://jobs.zalando.com/en/jobs/2724895-Senior-Security-GRC-Expert-(all-genders)","source":"careersite","description_text":"THE ROLE & THE TEAM\n\nAs a Senior Security GRC Expert in the Information Security - Security Risk & Governance Team, you will be at the forefront of safeguarding trust for our customers, stakeholders, and employees. By expertly identifying, assessing, and managing security risks, you will directly influence the security posture of our internal applications and third-party relationships, becoming the go-to expert and a key architect of our evolving Security Risk Management process.\nIn this pivotal role, you will help maintain and advance our security posture by taking ownership of our risk management processes. As a key stakeholder, you will translate complex business requirements into clear, actionable security operational solutions, implementing and ensuring our security framework remains robust and effective as we continue to grow.\n\nWHAT WE’D LOVE YOU TO DO (AND LOVE DOING)\n• Manage Security Compliance: Implement, maintain, and continuously improve the information security compliance framework. Experience with Secure Controls Framework (SCF) is a plus.\n• Ensure Regulatory Adherence: Monitor, enforce, and advise on compliance with DORA, GDPR, PCI-DSS, SOC2, NIS2, CRA, and other relevant regulations.\n• Develop Security Governance: Contribute to the creation, review, and upkeep of information security policies, procedures, and controls.\n• Drive Risk Management: Design, implement, and maintain the information security risk management framework for projects, systems, and processes.\n• Measure Risk Management Effectiveness: Develop KPIs to track the effectiveness of risk management efforts.\n• Report to Leadership: Prepare and present regular reports on security risks, compliance, and improvements.\n\nWE'D LOVE TO MEET YOU IF\n• You have 6+ years of experience working in Security Governance, Risk and Compliance functions.\n• You demonstrate strong communication skills and good interpersonal skills.You can communicate security risk-related concepts to technical and nontechnical audiences.\n• You have experience in interpreting and implementing security and privacy regulations and frameworks (e.g., NIST CSF, GDPR, ISO 2700x, SOC 2, PCI DSS, NIS2, CRA) into actionable security operational requirements.\n• You have a familiarity with the Secure Control Framework (SCF).\n• You have exceptional attention to detail, strong program/project management skills, analytical proficiency, and experience in operationalizing and developing scalable security processes in complex environments.\n• You have security certifications (e.g. CISSP, CRISC, CISM, ISO 27001 Lead Auditor/Implementer) as a plus.\n\nOUR OFFER\n\nZalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.\n• 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days)\n• 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners\n• Family support, including counselling and dedicated services for parents and carers\n• Company pension scheme\n• Employee shares programme\n• Health and wellbeing options, including Wellhub\n• Mental health support and coaching\n• Development through our training platform and biannual peer-to-peer review\n• 2 paid volunteering days a year\n• Relocation assistance (subject to prior agreement)\n\nINCLUSIVE BY DESIGN\n\nIf you think you have what it takes, we encourage you to apply even if you don't meet every single requirement. You may just be the right candidate for this or other roles!\nAt Zalando, our vision is to be the leading European technology platform for fashion and lifestyle – one that thrives on diversity and is truly inclusive by design. We believe that diverse teams fuel innovation and creativity, and we actively seek out talent from all backgrounds.\nWe actively seek to reduce bias in our hiring and employment processes, focusing on your qualifications, skills, and contributions. To support this, we kindly ask that you refrain from including personal details such as your photo, age, or marital status in your CV, ensuring a fair and equitable evaluation based solely on your abilities and potential.\n\nWe are committed to providing an exceptional and accessible candidate experience for everyone. If you require any accommodations to support you throughout the hiring process, please let us know – we are here to assist you.\n\nDiscover more about our commitment to creating a diverse and inclusive workplace: https://jobs.zalando.com/en/our-culture/diversity-and-inclusion\n\nPlease note that all applications from this job page must be completed using the online form - we do not accept applications via e-mail. Once reviewed, our recruiters will contact applicants via an official Zalando email address (@zalando.de).\nIn some cases we also work with a selection of headhunters and agencies to fill specific roles. Please note that neither Zalando nor our recruiting partners will ask for any kind of payment to apply for a job or attend an interview.\nIf you have any questions about our recruitment process, please take a look at our FAQ page.\n\nAbout Zalando\nFounded in Berlin in 2008, Zalando is the leading European technology platform for fashion and lifestyle. Connecting 62 million active customers with more than 7,000 brands across 29 markets, our operations are built on a unique AI-powered data and infrastructure platform. For our customers, our multi-app approach - comprising Zalando, ABOUT YOU, and Lounge by Zalando - delivers an inspiring, highly personalized shopping experience, serving different customers with different needs. For our partners, we are building the operating system for e-commerce. Through ZEOS, Tradebyte, and SCAYLE, we open our logistics, software, and service capabilities to brands and retailers, enabling them to seamlessly scale their businesses across borders.\nLearn more about our culture","responsibilities_text":null,"requirements_text":null,"status":"open","duplicate_of":null,"first_seen":"2026-11-02T15:49:35.456075+00:00","responsibilities_summary":"Own and improve the information security compliance and risk management framework, monitor regulatory adherence (DORA, GDPR, NIS2, etc.), contribute to security policies, build risk KPIs, and report security risks to leadership.","requirements_summary":"6+ years in security governance, risk and compliance; strong communication skills; experience turning security and privacy frameworks into operational requirements. Security certifications such as CISSP or CISM are a plus.","all_tools":["SOC","ISO 27001"],"posting_language":"en","evidence":[],"years_experience_max":null,"mobility_evidence":[{"kind":"relocation","quote":"Relocation assistance (subject to prior agreement)","value":"offered"}],"model_version":"claude-haiku-5-5","english_badge":"English not stated","company_id":181}