Senior Security GRC Analyst

At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer’s and partner’s needs and solve their challenges. Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve.   You’ll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about—locally and globally. Come make an impact every day at Zebra.

Senior Security GRC Analyst Evaluates, monitors, and assesses the design and operating effectiveness of security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. Serves as a key governance partner driving EU regulatory compliance (e.g., NIS2, GDPR) Responsibilities: Evaluates and tests the design and operational effectiveness of security controls, countermeasures, and defensive architectures across company email, data, e-commerce and complex web-based systems. Executes gap assessments and ongoing compliance assurance for key European and international cybersecurity regulations (e.g., NIS2 , GDPR, and Cyber Resilience Act). Translates complex statutory mandates into actionable internal security requirements. Executes highly important information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems. Internal or external, client-focused, working in conjunction with Professional Services and outsourcing functions. Manages complex company-wide, web-enabled GRC solutions. Manages department key performance metrics and actively engage in the continuous improvement of the Information Security department Creates reports that highlight areas where process or technology (i.e. IT infrastructure) may be improved, and advise Information Security, IT and other Business Units, on findings. Prepares appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, application controls, assessment reports, etc.) in support of all assurance and consulting work performed. Conducts information security compliance to policy assessments (e.g. ISO2700X, NIST, etc.) to evaluate risk, compliance, and control effectiveness, focusing on long-term strategies for a public company, and partner with business units to support implementation of remediation plans Requirements: Bachelor's degree Required. Advanced degree preferred. Preferred Work Experience (years): 8 years of experience in Cybersecurity, GRC , IT Audit , Regulatory Assurance Hands-on experience executing risk and compliance assessments against major security frameworks and European regulations (e.g., ISO/IEC 27001, NIST CSF/800-53, NIS2 Directive, DORA, or GDPR). Ability to implement new systems and tools Experience managing IT documentation processes Advanced analytical skills Advanced demonstration of project managing IT solutions Manages in a fast-paced, high growth, rapidly changing environment Demonstrated ability to identify and implement process improvements Preferred: Relevant security certifications (e.g. CRISC, CISM, CISSP, CISA).

5 weeks of vacation, 5 sick days and 4 volunteer days paid off. Multisport card at a reduced price.   Meal contribution.   Monthly contribution 1000 CZK/month in the form of credits on your Benefit plus card with cafeteria system where you can choose from wide range of activities/benefits from Health, Sports, Travel, Wellness, Development, Culture up to company Language