Senior Security GRC Expert (all genders)

Zalando is hiring a Senior Security GRC Expert for its Information Security - Security Risk & Governance team to help safeguard trust for customers, stakeholders, and employees. The role identifies, assesses, and manages security risks, influencing the security posture of internal applications and third-party relationships and acting as a key architect of the evolving Security Risk Management process. It implements and improves the information security compliance framework, ensures adherence to regulations such as DORA, GDPR, PCI-DSS, SOC2, NIS2, and CRA, and develops security governance policies and controls. The expert also designs and maintains the risk management framework, develops KPIs, and reports on risk and compliance to leadership.