Junior GRC Analyst – Security Governance & Risk

About the role

As a Junior GRC Analyst within the Security function, you will support the execution and continuous improvement of governance, risk, compliance and operational resilience practices across foodpanda and its sister brands. This position is ideal for an early‑career professional eager to work in a cloud‑native, AI‑driven environment.

Key responsibilities

• Assist with information security governance and policy management.
• Support regulatory and audit compliance activities (ISO 27001, SOC 2, PCI‑DSS, NIST, CIS Controls).
• Contribute to technology and cyber risk assessments.
• Manage third‑party and vendor risk processes.
• Help ensure cloud and platform compliance.
• Participate in data and customer protection governance.
• Support operational resilience initiatives.
• Develop and automate security reporting and dashboards.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, Business, Data Analytics or related field.
• At least 1 year of experience in GRC, information security, technology risk, audit, compliance, data analytics or automation.
• Basic understanding of security frameworks and standards.
• Familiarity with modern cloud, SaaS and automation environments.
• Strong organisational, analytical, documentation and communication skills.
• Eagerness to learn and grow in cybersecurity governance.

Required skills

• Knowledge of ISO 27001, SOC 2, PCI‑DSS, NIST, CIS Controls.
• Experience with cloud platforms (e.g., AWS, Azure, GCP).
• Use of SaaS tools and automation platforms.
• Building and interpreting reporting dashboards.
• Exposure to AI‑enabled productivity tools.

What we offer

• A dynamic and challenging work environment.
• Opportunities for professional growth in cybersecurity.
• Access to modern technology stacks and cross‑functional teams.