<h2><strong>The role</strong></h2> <p>We’re looking for a new teammate who will support the implementation and ongoing maintenance of information security compliance and certification programs, working with cross-functional internal teams and external auditing agencies. The person will also support data protection, data privacy, and third-party vendor risk management functions.</p> <p>The position will be part of the Governance, Risk & Compliance (GRC) team at HelloFresh that is responsible for creating, maintaining and improving HelloFresh’s security risk management program and remediation activities; information security and data privacy related processes, policies, and guidelines; supporting compliance and certification related activities; and driving security awareness and education.</p> <p>Above all, we are looking for people who will <strong>make HelloFresh</strong> <strong>better.</strong> We believe there are many different ways of developing skills and we love diverse experiences! So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you.</p> <h2><strong>What you’ll do</strong></h2> <ul> <li><strong>Lead end-to-end compliance readiness</strong> for NIS2 and support alignment across other key frameworks (e.g., PCI DSS, CSRD, ISO/SOC and EU AI Act).</li> <li><strong>Plan and execute internal control assessments</strong> and coordinate external compliance audits on a defined cadence.</li> <li><strong>Translate regulatory requirements</strong> into practical controls; drive cross-functional implementation across international teams.</li> <li><strong>Own remediation management: </strong>track findings, evidence, owners, deadlines, and report status to stakeholders.</li> <li><strong>Improve GRC maturity </strong>through continuous monitoring, clear documentation, and mentoring junior team members.</li> <li><strong>Lead</strong> internal assessments and coordinate external compliance audits at planned intervals</li> <li><strong>Evaluate</strong> and validate the design and operational effectiveness of security policies, standards, and internal controls to help reduce compliance risk in the company</li> <li><strong>Develop</strong> comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences</li> </ul> <h2><strong>What you’ll bring</strong></h2> <ul> <li><strong>3+ years' experience</strong> in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2,
hellofresh
Posted via Arbeitnow
Apply Now takes you to Rozgoo, where auto-apply can submit your application for this role. Updated today.
Apply Now