Cybersecurity Governance, Risk & Compliance (GRC) Analyst

Itron is innovating new ways for utilities and cities to manage energy and water. We create a more resourceful world to protect essential resources for today and tomorrow. Join us.

The Cybersecurity Governance, Risk & Compliance (GRC) Analyst supports the organization’s global cybersecurity governance and regulatory compliance programs. This role assists with the development, maintenance, and continuous improvement of security governance processes, internal controls, audit readiness activities, and compliance initiatives aligned to regulatory, contractual, and industry requirements.

The position focuses on governance activities related to Sarbanes-Oxley (SOX), ISO 27001/27002 and 27017, and SSAE-18 (SOC 1 and SOC 2). The role also supports regulatory compliance obligations associated with the European Union Network and Information Security Directive (NIS2), Australia’s Security of Critical Infrastructure (SOCI) Act, and Cyber Essentials governance expectations in the United Kingdom and other countries.

This role works across Information Security, Internal Audit, Legal, Compliance, IT Operations, and business teams to assess control effectiveness, identify gaps, coordinate audit evidence, track remediation, and provide clear compliance reporting to management.

Duties & Responsibilities

• Assist in managing cybersecurity compliance activities across multiple frameworks and countries to include EU NIS2, Australia SOCI, UK Cyber Essentials.
• Assist in interpreting regulatory and statutory requirements partnering with internal teams and business stakeholders, then translate obligations into actionable security controls and processes.
• Conduct compliance gap assessments and maintain remediation plans through closure.
• Help maintain regulatory obligation registers, compliance trackers, evidence repositories, and status reporting artifacts.
• Monitor emerging cybersecurity regulations and legislative developments that may affect global security governance obligations.
• Support internal and external audits related to SOX, SSAE-18, ISO, NIS2, SOCI, and Cyber Essentials requirements.
• Assist in tracking audit findings, observations, control deficiencies, and management action plans through remediation and closure.
• Partner with Information Security and other internal teams and business leaders to meet governance and compliance objectives.
• Assist in providing guidance to stakeholders regarding governance requirements, audit expectations, evidence needs, and regulatory obligations.

 Required Skills & Experience

• Bachelor’s degree in Cybersecurity, Business Administration or a related field, or equivalent work experience.
• At least 1 year of experience in information security governance, compliance, audit, risk management, IT controls, or related disciplines.
• Working knowledge of several cybersecurity governance and compliance frameworks, such as SOX, ISO 27001/27002, SSAE-18, NIS2, SOCI, or Cyber Essentials.
• Experience supporting audits, compliance assessments, control testing, policy reviews, or evidence collection activities.
• Strong analytical, organizational, documentation, and written communication skills.
• Ability to work independently and collaborate effectively across technical and non-technical teams.

Preferred Skills & Experience

• Experience supporting multinational cybersecurity compliance programs.
• Familiarity with GRC platforms such as Auditboard/Optro, Archer, ServiceNow GRC, or similar tools.
• Working knowledge of NIST Cybersecurity Framework, CIS Controls, COBIT, or COSO internal control concepts.
• Oracle (both on-prem and Cloud) administration experience.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 Lead Implementer / Lead Auditor.

What we offer

• Opportunity to create a more resourceful world by working on the 21st century's biggest challenges: water, energy, and gas
• R&D center with immense growth in the heart of Budapest at Deák Ferenc square
• Cutting-edge technologies (Cloud, IoT)
• Personal development: English, soft skills, and technical training (Udemy, Pluralsight, etc.)
• Benefits: accident and life insurance, private outpatient care support, cafeteria, iPhone with a generous data allowance
• Strong culture promoting work-life balance, remote and flexibility

Depending on your experience, this role is expected to offer between gross 9,000,000 HUF and 14,000,000 HUF annually. We review compensation regularly to stay competitive in the market.

#LI-IB1 #LI-HYBRID

Itron is committed to building an inclusive and diverse workforce and providing an authentic workplace experience for all employees. If you are excited about this role but your past experiences don't perfectly align with every requirement, we encourage you to apply anyway. In the end, you may be just who we are looking for!

The successful candidate's starting wage will be determined based on permissible, non-discriminatory factors such as skills and experience.

Itron is proud to be an Equal Opportunity Employer. If you require an accommodation to apply, please contact a recruiting representative at 1-800-635-5461 or email [email protected].

Itron is transforming how the world manages energy, water and city services. Our trusted intelligent infrastructure solutions help utilities and cities improve efficiency, build resilience and deliver safe, reliable and affordable service. With edge intelligence, we connect people, data insights and devices so communities can better manage the essential resources they rely on to live. Join us as we create a more resourceful world: www.itron.com