Security Analyst

Working in a rapidly growing, ever-changing scale-up comes with its own set of opportunities and challenges. If you prefer a stable environment, with clear processes and structures then, we've got to be honest, you won't always find that here. However, if you enjoy inventively solving problems with others, helping create clarity when things get confusing, and prioritising your own path within ambiguity, then the chances are that you'll love the opportunities available to grow your career at Booksy.

The people you’ll like to work with and things you'll enjoy impacting:

As an Security Analyst reporting into the Director of Enterprise Technology in our Enterprise Technology team, your role will play a key part in ensuring the organisation's security posture is robust and aligned with industry best practices and regulatory requirements. As a Security Analyst, you will therefore be responsible for implementing and maintaining an effective GRC framework, conducting risk assessments, and driving continuous improvement of our security controls.

Some of your responsibilities will include:

• Develop, implement, and maintain an effective GRC framework, including policies, procedures, and standards.
• Collaborate with other risk-management teams to identify and prioritize security risks.
• Develop and maintain an inventory of security controls (ITGC) and ensure their effectiveness through regular testing and monitoring.
• Advise System Owners on the most effective implementation of IT Controls in context of their systems.
• Conduct internal compliance assessments and assist with regulatory compliance efforts (e.g., NIS2, PCI-DSS, SOX, GDPR).
• Prepare and present reports on security risks and compliance status to the management.