Junior GRC Analyst

Job description

As our Junior GRC Analyst, you'll support the culture of governance, risk, and compliance across FTMO and our broader group entities, helping embed security as an everyday part of how we work rather than a once-a-year exercise. You'll help maintain our security documentation, deliver awareness trainings to FTMO users, assist in identifying and assessing risks that could affect the business, work alongside teams on business continuity, disaster recovery, and incident response plans or help track vendor compliance with FTMO's expectations. ## What will you do? - **Documentation management** - Creation, regular updates, and awareness-raising about valid FTMO documentation covering security and privacy areas - **Awareness** - Launch new awareness campaigns - Evaluate the effectiveness of existing campaigns - **Gap assessments** - Perform gap assessments on new regulatory or certification requirements - **Support Senior GRC Analysts and other parts of the security organization** within the areas of - Risk management - Business Continuity - Disaster Recovery - Incident Response - Access rights management - Vulnerability oversight - Vendor management ## What do you bring to the table? - 1-3 years of experience in a similar position with a proven track record - Experience in working within a regulated environment or an integrated management system - Knowledge of domains within GRC responsibility and how they support the business goals - Previous knowledge of creating structured internal documentation - Ability to deliver engaging awareness campaigns - Experience in performing gap assessments - Fluent English, both spoken and written - Attention to detail and analytical skills - Creativity with excellent organisational skills ## What would be nice to have? - Knowledge of risk management and risk treatment plans management - Working experience with GRC tools such as Vanta, OneTrust etc. - Interest in cybersecurity topics (IAM, DLP, XDR, SOC, AI …) - Previous exposure to external audits, or performing internal audits on your own - Basic understanding of Business Continuity, Disaster Recovery and Incident Management - Exposure to data privacy topics from a GDPR perspective - Working knowledge of Czech Cybersecurity Act and relevant requirements - CompTIA Security+, Certified in Cybersecurity, ISO 27001 Foundation or similar certifications are preferred, but not mandatory ## **Why join the FTMO team?** - We are a Czech fintech that, since 2015, has **grown from an idea into a global project**. 🚀 - **300+ amazing teammates**. We’re a great team who learn from each other every day.🤜**🤛** - **How do we work**? We focus on meaningful work and open communication, while only adopting processes that make our lives easier. - **Prague, Národní třída.** Enjoy our modern offices at the Quadrio shopping center, offering beautiful views and excellent accessibility. - **What if I don’t trade?** No worries. We’ll show you what our product is all about and introduce you to the basics of trading. - **Free fruit, snacks, and coffee** are always within reach in the office. - How do we promote strong relationships and well-being? **Company cottage, team building events, and running club.** - **Flexible hybrid model.** We prefer collaborating in person to keep the team spirit high, but we offer the flexibility you need to stay balanced. *\*The benefits mentioned above apply to FTMO on-site employees in our Prague office.*