GRC Analyst

@ Blockdaemon

Overview

Blockdaemon is seeking a proactive and detail-oriented GRC Analyst to join our remote team based in Ireland. This role is essential for maintaining and maturing our information security risk and technology compliance programs, including SOC 2 and ISO 27001.

Your Impact

The GRC Analyst will:

• Manage SOC 2 and ISO 27001 documentation.
• Track remediation and action items.
• Support internal and external audit processes.
• Assist with ISMS documentation maintenance.

Vanta Administration

Key responsibilities include:

• Administer Vanta ensuring accurate control mappings.
• Maintain control testing evidence.
• Support automation of evidence collection.

Third-Party Risk Management

The role involves:

• Conducting vendor due diligence and risk assessments.
• Tracking remediation items and risk mitigation actions.
• Maintaining updated vendor risk documentation.

Policy, Procedure & SOP Library

Responsibilities include:

• Version-control policies and SOPs in Confluence.
• Ensure alignment with compliance frameworks.
• Draft and edit new or updated documentation.

Role Requirements

Applicants should have:

• 2–4 years in GRC, Information Security, or Audit.
• Working knowledge of SOC 2 Type II and ISO 27001.
• Strong organizational and documentation skills.
• Experience preparing audit deliverables.
• Exposure to risk assessment and vendor management.
• Excellent communication skills.

Nice-to-Have Skills

Preferred qualifications include:

• Experience with Vanta, Jira, and Confluence.
• Familiarity with cloud or SaaS environments (GCP, AWS, etc.).
• Relevant certifications such as ISO 27001 Internal Auditor, CISA, or CompTIA Security+.

About Blockdaemon

Blockdaemon powers the blockchain economy with industry-leading infrastructure solutions, offering technical depth, global reach, and robust security and compliance. We serve exchanges, custodians, crypto platforms, and financial institutions with innovative blockchain tools and support.

Key skills/competency

SOC 2, ISO 27001, GRC, Vanta, Audit, Documentation, Risk Management, Compliance, Vendor, Blockchain