Data & AnalyticsNot provided by source

Senior GRC Analyst (m,f,x)

HelloFresh · Not provided by source

Apply

Last seen by MeritLog September 9, 2026Source: GreenhouseSource version: greenhouse-job-board-v1

MeritLog read this listing from HelloFresh's Greenhouse job board and last checked it on September 9, 2026.

Source: the employer's Greenhouse job board. Open the original listing for current details.

Job details

Work model: Not provided by source
Salary: Not listed by source
Location: Berlin, Berlin, Germany

Hiring context

How this role compares at HelloFresh

HelloFresh has 466 live roles in MeritLog’s catalog across 11 job families, and 184 of them are in data & analytics. 2 of those listings publish a pay range, a disclosure rate of 0%.

HelloFresh concentrates this hiring in:

Counted across the job boards MeritLog tracks, at the time this page was served. Pay comparisons use only listings that publish a complete range in the same currency and period.

What the role asks for

What you'd do

Lead end-to-end compliance readiness for NIS2 and support alignment across other key frameworks (e.g., PCI DSS, CSRD, ISO/SOC and EU AI Act).
Plan and execute internal control assessments and coordinate external compliance audits on a defined cadence.
Translate regulatory requirements into practical controls; drive cross-functional implementation across international teams.
Own remediation management: track findings, evidence, owners, deadlines, and report status to stakeholders.
Improve GRC maturity through continuous monitoring, clear documentation, and mentoring junior team members.
Lead internal assessments and coordinate external compliance audits at planned intervals
Evaluate and validate the design and operational effectiveness of security policies, standards, and internal controls to help reduce compliance risk in the company
Develop comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences

What they're asking for

3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.)Experience
Ability to interpret compliance regulations and map them to the actual implementation of systems, whilst referencing various security frameworksSkill
Experience supporting data privacy regulations (GDPR, CCPA) and third-party risk management programsSkill
Experience with developing and executing security awareness programs and trainingsSkill
Highly organized and detail-oriented, with an ability to work independentlySkill
Industry compliance certifications (CISA, CISM, CISSP) are a plusCredentialPreferred
Prior experience working in a SaaS environment, mainly Cloud and AWS-basedSkill

Parsed by MeritLog from the employer’s own posting. The full description follows below.

Job description

The role We’re looking for a new teammate who will support the implementation and ongoing maintenance of information security compliance and certification programs, working with cross-functional internal teams and external auditing agencies. The person will also support data protection, data privacy, and third-party vendor risk management functions. The position will be part of the Governance, Risk & Compliance (GRC) team at HelloFresh that is responsible for creating, maintaining and improving HelloFresh’s security risk management program and remediation activities; information security and data privacy related processes, policies, and guidelines; supporting compliance and certification related activities; and driving security awareness and education. Above all, we are looking for people who will make HelloFresh better. We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you. What you’ll do • Lead end-to-end compliance readiness for NIS2 and support alignment across other key frameworks (e.g., PCI DSS, CSRD, ISO/SOC and EU AI Act). • Plan and execute internal control assessments and coordinate external compliance audits on a defined cadence. • Translate regulatory requirements into practical controls; drive cross-functional implementation across international teams. • Own remediation management: track findings, evidence, owners, deadlines, and report status to stakeholders. • Improve GRC maturity through continuous monitoring, clear documentation, and mentoring junior team members. • Lead internal assessments and coordinate external compliance audits at planned intervals • Evaluate and validate the design and operational effectiveness of security policies, standards, and internal controls to help reduce compliance risk in the company • Develop comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences What you’ll bring • 3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.) • Ability to interpret compliance regulations and map them to the actual implementation of systems, whilst referencing various security frameworks • Experience supporting data privacy regulations (GDPR, CCPA) and third-party risk management programs • Experience with developing and executing security awareness programs and trainings • Highly organized and detail-oriented, with an ability to work independently • Industry compliance certifications (CISA, CISM, CISSP) are a plus • Prior experience working in a SaaS environment, mainly Cloud and AWS-based What we offer Elevate your lifestyle! Join one of Europe's fastest-growing tech powerhouses in a dynamic phase of expansion. • Immerse yourself in a diverse global community of 90+ nationalities. • Enjoy a competitive compensation package that goes beyond the norm, with perks like a HelloFresh- subsidized Pension Scheme, Berlin relocation support, and a Hybrid working model. • Elevate your lifestyle with exclusive discounts on your weekly HelloFresh box and office meals. • Invest in your growth with a German language learning budget, and access to the HelloFresh Academy. • Plus, we've got your well-being covered with mental health support, transportation perks, and working-parent-friendly benefits. From our 24/7 gym access,wellbeing platforms like Headspace and Spill, to sabbatical leave options, HelloFresh is not just a workplace; it's a lifestyle of perks and possibilities!

Keep exploring

More Data & Analytics roles

Search all jobs