Grc specialist

Sobre a vaga

We're looking for a Cyber Governance, Risk and Compliance Specialist to join our Information Security team. You'll help strengthen Farfetch's cybersecurity governance, risk management, and compliance practices. You'll work closely with stakeholders to identify and assess security risks, monitor compliance, support audits and assessments, and improve the Information Security framework.

O que vais fazer

• Support the development, implementation, and continuous improvement of Farfetch's Information Security governance framework
• Recommend and implement changes to strengthen security controls and reduce the risk of unauthorized access
• Review, maintain, and audit Information Security policies, procedures, and related documentation
• Monitor compliance with applicable legal, regulatory, and industry standards and requirements
• Perform Information Security risk assessments and other security reviews, identifying gaps and supporting the definition of appropriate mitigation actions
• Support audits, compliance assessments, and gap analyses across the Information Security landscape
• Coordinate and monitor company-wide Information Security controls to help protect the integrity of Farfetch's assets
• Contribute to increasing Information Security awareness across the business
• Collaborate with internal stakeholders to ensure security risks, controls, policies, and compliance requirements are effectively managed
• Contribute to Information Security initiatives involving areas such as Data Privacy, AI Governance, and Data Governance

O que é pedido

• You have a degree in Computer Science, Information Security, or a related field
• You have a background in software development or systems administration
• You have more than 4 years of experience in a similar Information Security, GRC, Risk, or Compliance role
• You have a good understanding of network protocols, design, and operations
• You have working knowledge of Information Security principles, techniques, and technologies
• You have experience with Information Security governance frameworks and standards, such as COBIT and ISO 27001
• You have experience reviewing security policies and procedures, managing documentation, and performing gap analyses
• You have a good understanding of risk assessment methodologies, such as OCTAVE and NIST SP 800-30
• You have strong English communication skills, both written and verbal
• You're self-motivated, proactive, and comfortable working with minimal supervision

Valorizado

• Certifications in Information Security, such as CRISC, CISA, CEH, or similar, are a plus
• Experience with Data Privacy Impact Assessments (DPIAs) is a plus
• Experience working on AI and Data Governance projects is a plus

O que é oferecido

• Health insurance for the whole family, flexible working environment and well-being support and tools
• Extra days off, sabbatical program and days for you to give back for the community
• Training opportunities and free access to Udemy
• Flexible benefits program