Cybersecurity GRC Analyst

About the role

Itron, which helps utilities and cities manage energy, water and gas, is hiring a Cybersecurity Governance, Risk & Compliance (GRC) Analyst in Budapest. The analyst supports the global cybersecurity governance and regulatory compliance programs, helping develop, maintain and improve security governance processes, internal controls, audit readiness and compliance initiatives. The role covers SOX, ISO 27001/27002/27017 and SSAE-18 (SOC 1 and SOC 2), and also addresses EU NIS2, Australia's SOCI Act and UK Cyber Essentials.

Key responsibilities

• Manage cybersecurity compliance activities across frameworks and countries, including EU NIS2, Australia SOCI and UK Cyber Essentials
• Interpret regulatory requirements and turn them into actionable security controls and processes
• Conduct compliance gap assessments, maintain remediation plans and keep registers, trackers, evidence and reports up to date
• Monitor emerging regulations and support internal and external audits (SOX, SSAE-18, ISO, NIS2, SOCI, Cyber Essentials)
• Track audit findings and control deficiencies through remediation and closure
• Partner with Information Security, Internal Audit, Legal, Compliance, IT Operations and business teams, and guide stakeholders on governance and audit expectations

Required profile

• Bachelor's degree in Cybersecurity, Business Administration or a related field, or equivalent experience
• At least 1 year of experience in information security governance, compliance, audit, risk management, IT controls or related fields
• Experience supporting audits, compliance assessments, control testing, policy reviews or evidence collection
• Ability to work independently and collaborate across technical and non-technical teams

Required skills

• Working knowledge of frameworks such as SOX, ISO 27001/27002, SSAE-18, NIS2, SOCI or Cyber Essentials
• Preferred: experience with multinational compliance programs, GRC platforms (Auditboard/Optro, Archer, ServiceNow GRC), NIST CSF, CIS Controls, COBIT, COSO, Oracle administration, and certifications such as CISA, CISM, CRISC, CISSP or ISO 27001 Lead Implementer / Lead Auditor

What we offer

• Salary of roughly 9,000,000 to 14,000,000 HUF gross per year depending on experience
• R&D center in Budapest with growth, cloud and IoT technologies
• Training in English, soft skills and technical topics
• Accident and life insurance, private outpatient care support, cafeteria and iPhone with data allowance
• Work-life balance, remote and flexible work