Senior Security GRC Analyst

Overview:

At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer’s and partner’s needs and solve their challenges.

Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve.

 

You’ll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about—locally and globally.

Come make an impact every day at Zebra.

What We're Looking For:

Senior Security GRC Analyst

Evaluates, monitors, and assesses the design and operating effectiveness of security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. Serves as a key governance partner driving EU regulatory compliance (e.g., NIS2, GDPR)

Responsibilities:

• Evaluates and tests the design and operational effectiveness of security controls, countermeasures, and defensive architectures across company email, data, e-commerce and complex web-based systems.
• Executes gap assessments and ongoing compliance assurance for key European and international cybersecurity regulations (e.g., NIS2 , GDPR, and Cyber Resilience Act). Translates complex statutory mandates into actionable internal security requirements.
• Executes highly important information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
• Internal or external, client-focused, working in conjunction with Professional Services and outsourcing functions.
• Manages complex company-wide, web-enabled GRC solutions.
• Manages department key performance metrics and actively engage in the continuous improvement of the Information Security department
• Creates reports that highlight areas where process or technology (i.e. IT infrastructure) may be improved, and advise Information Security, IT and other Business Units, on findings.
• Prepares appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, application controls, assessment reports, etc.) in support of all assurance and consulting work performed.
• Conducts information security compliance to policy assessments (e.g. ISO2700X, NIST, etc.) to evaluate risk, compliance, and control effectiveness, focusing on long-term strategies for a public company, and partner with business units to support implementation of remediation plans

Requirements:

• Bachelor's degree Required. Advanced degree preferred.
• Preferred Work Experience (years): 8 years of experience in Cybersecurity, GRC , IT Audit , Regulatory Assurance
• Hands-on experience executing risk and compliance assessments against major security frameworks and European regulations (e.g., ISO/IEC 27001, NIST CSF/800-53, NIS2 Directive, DORA, or GDPR).
• Ability to implement new systems and tools
• Experience managing IT documentation processes
• Advanced analytical skills
• Advanced demonstration of project managing IT solutions
• Manages in a fast-paced, high growth, rapidly changing environment
• Demonstrated ability to identify and implement process improvements
• Preferred: Relevant security certifications (e.g. CRISC, CISM, CISSP, CISA).

Benefits:

• 5 weeks of vacation, 5 sick days and 4 volunteer days paid off.
• Multisport card at a reduced price. 
• Meal contribution. 
• Monthly contribution 1000 CZK/month in the form of credits on your Benefit plus card with cafeteria system where you can choose from wide range of activities/benefits from Health, Sports, Travel, Wellness, Development, Culture up to company Language courses. 
• Training and personal development in soft skills and hard skills, access to our internal learning portal and internal career opportunities within Zebra departments. 
• Annual bonuses based on financial results. 
• Yearly salary increases according to individual performance. 
• Employee referral bonus for bringing New Talent to Zebra. 
• Free beverages and fruit days (coffee, tea, milk available in our kitchenette). 
• Life & Pension insurance contribution. 
• New modern and multifunctional workplace at Vlněna Office park in the city centre  
• Discount at our partners (Banks, HP, Dell, Microsoft Office). 

Incentive Compensation:

In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 12% of base pay, in accordance with the terms of the applicable incentive plan.

Job Posting Statement:

To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you via @zebra.com email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department.

AI Technology Statement:

Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However, every decision regarding interviews and hiring is made by our dedicated team, because we believe people make the best decisions about people. For more on how we use technology in hiring and how we process applicant data, see our Zebra Privacy Policy.