GRC Analyst – Governance, Risk & Compliance

About the role

Sitecore is seeking a detail‑oriented GRC Analyst to join its Dublin team. The analyst will support operations aligned with U.S. Central and Eastern time zones and report to the GRC Manager. This hands‑on position focuses on security, compliance, and AI governance within a fast‑paced, collaborative environment.

Key responsibilities

• Perform vendor risk reviews, including due‑diligence assessments for new vendors and annual reassessments for existing vendors.
• Maintain the central risk register, documenting, assessing, and tracking risks through remediation or acceptance.
• Participate in risk‑management forums and meetings with key stakeholders to review risk posture and emerging issues.
• Monitor remediation actions, escalating risks and issues as needed to ensure timely resolution.
• Support external and internal audits for PCI, HIPAA, IRAP, TISAX, SOC 2, SOC 1, ISO 27001, ISO 42001, and other relevant certifications.
• Prepare audit evidence, coordinate with auditors, maintain audit calendars, and ensure ongoing audit readiness.

Required profile

• Proactive and detail‑oriented with a strong interest in security, compliance, and AI governance.
• Comfortable working in a collaborative, fast‑paced environment.
• Excellent communication skills for interacting with stakeholders and auditors.

Required skills

• Knowledge of PCI compliance standards.
• Familiarity with HIPAA regulations.
• Experience with IRAP and TISAX frameworks.
• Understanding of SOC 2 and SOC 1 audit requirements.
• Knowledge of ISO 27001 and ISO 42001 standards.