Avnet Business Services GmbH
Avnet Business Services GmbH is the service provider of the Avnet Group in EMEA, founded in 2020. With its brands EBV Elektronik, Avnet Silica, Avnet Abacus, Avnet Embedded and Farnell, Avnet is one of the world's most successful distributors of semiconductor products and related services. Avnet is also an S&P 500 listed group. Employees in 70 countries set new standards every day in terms of innovation and quality, for which Avnet has been known in the market for 100 years.
We are looking for a highly skilled and experienced Senior Cybersecurity Governance, Risk, and Compliance (GRC) Analyst to join our global security enablement team, where you will help shape and maintain our global security posture.
This position can be based in one of our offices in Spain (Madrid or Málaga) or in France (Massy or Toulouse), and it offers a flexible, hybrid working arrangement, with just one day per week in the office.
This role is essential in advancing our GRC initiatives across international operations. If you have strong expertise in cybersecurity assessments, regulatory frameworks, and risk management, we are looking forward to receiving your application!
What you will be doing:
Governance
1. Lead and execute cybersecurity assessments using recognized frameworks such as ISO/IEC 27001, Cyber Essentials Plus, and NIST CSF.
2. Develop, update, and manage cybersecurity policies, standards, and procedures to meet global regulatory requirements.
3. Stay informed about emerging threats, regulatory changes, and industry best practices to guide governance efforts.
Risk Management
4. Conduct risk assessments across business units and regions.
5. Maintain and update risk registers and support the development of mitigation strategies.
6. Support third-party risk management by assessing vendor security practices and compliance.
Compliance
7. Support internal and external audit preparation and response activities.
8. Monitor and report on compliance status, risk metrics, and control effectiveness.
9. Ensure alignment with global compliance requirements, including SOX, GDPR, PCI-DSS, ISO 27001, NIST CSF, Cyber Essentials Plus, and AirCyber.
What we are looking for:
10. Minimum of six (6) years of experience in cybersecurity GRC roles, preferably in a global enterprise environment.
11. Bachelor’s degree in Information Security, Information Technology, or a related field, or equivalent practical experience.
12. Proven experience in conducting risk assessments, gap analyses, and control testing.
13. In-depth knowledge of cybersecurity standards, regulatory frameworks, and certification requirements, including:Sarbanes-Oxley (SOX)PCI-DSSISO/IEC 27001:2022NIST CSF 2.0NIST Risk Management FrameworkCyber Essentials PlusAirCyber, and others
14. Familiarity with GRC platforms and tools such as ServiceNow, AuditBoard, or Onspring.
15. Professional certifications such as CISSP, CISA, CRISC, or ISO 27001 Lead Auditor are highly desirable.
16. Strong communication and stakeholder engagement skills.
17. Business-level proficiency in written and spoken English.
18. Ability to work independently and collaboratively across time zones and cultures.
What’s in it for you:
Alongside a competitive salary, we offer a range of benefits:
19. A supportive multicultural team environment where everyone is working toward the same goal
20. A strong open-door policy
21. An environment where you will have the tools and opportunities to further your career
22. A role where you have the freedom to come up with and own new ideas and design your processes
23. Hybrid working – 1 day per week on-site.
24. Paid holiday, plus bank holidays
25. Work equipment
26. And more….
#LI-AVNET
#LI-EMEA
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills.
Avnet is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you are interested in applying for employment with Avnet and need special assistance or an accommodation to apply for a posted position contact our Human Resources Service Center in your region: Americas applicants –, Asia applicants -, EMEA applicants - .