Senior GRC Analyst

About the role

Preply is seeking a Senior GRC Analyst to lead and expand its governance, risk, and compliance program within a fast‑growing global cybersecurity team. Reporting to the Director of Security, you will work cross‑functionally to embed security controls, manage third‑party risk, and support audit readiness.

Key responsibilities

• Maintain and continuously improve Preply’s risk management framework, defining approaches and overseeing mitigation actions.
• Lead enterprise risk assessments, track Key Risk Indicators and report findings to leadership.
• Manage third‑party risk program, conducting vendor reviews to ensure security standards are met.
• Develop and maintain security, AI, and compliance policies in collaboration with Legal, Security, and Data teams.
• Support SOC 2 Type 2 compliance initiatives and potential expansion to ISO 27001, ensuring controls are documented and audit‑ready.
• Contribute to privacy initiatives, data retention policies, and compliance with GDPR, CCPA and other regulations.
• Automate GRC operations using AI tools to streamline evidence collection, control monitoring and reporting.

Required profile

• 5+ years experience in GRC, risk management, compliance or cybersecurity, preferably in a tech/SaaS environment.
• Proven track record implementing SOC 2 Type 2 and familiarity with ISO 27001, ISO 27701, PCI DSS or similar frameworks.
• Experience translating regulatory requirements (GDPR, CCPA, EU AI Act, etc.) into practical policies.
• Strong cross‑functional collaboration and stakeholder management skills.

Required skills

• SOC 2 Type 2 implementation
• ISO 27001, ISO 27701, PCI DSS frameworks
• GDPR, CCPA, COPPA, EU AI Act compliance
• Risk assessment methodology and KRI tracking
• Cloud security and modern SaaS risk landscape
• Use of AI tools for GRC automation

What we offer

• Open, collaborative and diverse culture with a generous monthly allowance for Preply lessons.
• Competitive financial package including equity, health insurance and relocation support for Barcelona.
• Learning & Development budget, mental health support, and Gympass wellness access.
• Opportunity to shape education for millions of learners worldwide.