Key Skills

Job Description

Cybersecurity Analyst – Audit Amsterdam, Netherlands OR Luxembourg Monday – Friday 8:00 am – 5:00 pm OR 9:00 am – 6:00 pm Hybrid (3 days onsite) Position Summary We are seeking a Cybersecurity GRC Data and Reporting Analyst to manage the preparation, analysis, validation, and maintenance of technology controls, compliance and audit data within the organization’s GRC platform. Operating within the first line of defense, this role consolidates data from approved business and technology sources and transforms it into accurate, consistent, and actionable information in the GRC platform. The Data Analyst will maintain datasets, dashboards, metrics, data dictionaries, and management reports while identifying opportunities to improve data quality, standardize reporting, and automate manual processes. The role will also support Information Technology audits and regulatory examinations, including SOC 1, SOC 2, ISAE 3402, and ISO 27001. Responsibilities include coordinating data and evidence requests, validating submissions, maintaining audit records, monitoring deliverables, supporting remediation, and conducting pre-audit readiness assessments. The role works closely with auditors, control owners, technology teams, and business stakeholders. The ideal candidate has two to four years of experience in data analytics, business intelligence, GRC data management, cybersecurity, technology risk, compliance, or IT audit support. Essential Job Duties Collect, consolidate, cleanse, map, and analyze technology risk, compliance, control, evidence, issue, and audit data. Translate complex datasets and technical risks into clear, actionable business insights. Define and document data attributes, ownership, source systems, formats, validation rules, and reporting requirements. Validate data for accuracy, completeness, consistency, relevance, timelines and appropriate approval. Perform post-upload validation and reconcile GRC records against approved source data. Maintain data dictionaries, data mappings, reporting definitions, evidence standards, and audit records. Identify opportunities to standardize and automate data collection, validation, reconciliation, reporting, and evidence tracking. Identify opportunities to automate and standardize data collection, validation, reconciliation, reporting, and evidence tracking. Leverage GRC and reporting tools for data management, audit tracking, dashboards, and management reporting. Partner with global teams across Technology, Cybersecurity, Risk, Compliance, Legal, Internal Audit, and business operations. Support internal, external, and jurisdictional IT audits by coordinating evidence requests, walkthroughs, deadlines, and stakeholder communications. Track audit requests, findings, remediation actions, auditor feedback, and regulatory deliverables. Collect audit evidence from control owners and validate its accuracy, completeness, relevance, and approval before submission. Conduct pre-audit readiness assessments to identify control, documentation, and evidence gaps before formal testing. Work with business and technology owners to obtain corrected or remediated evidence. Improve IT compliance processes and identify automation opportunities for control activities. Maintain and enhance control frameworks aligned with regulatory and industry standards. Track and report compliance metrics and program effectiveness indicators. Respond to regulatory and jurisdictional requests for technology risk, control, and audit data. Qualification and Core Skills Bachelor’s degree in Computer Science, Information Technology, MIS, Data Analytics or related field (or equivalent experience). 2 to 4 years of experience in data analytics, business intelligence, technology reporting, GRC data management, IT audit, risk management, or cybersecurity. Demonstrated experience in data collection, cleansing, mapping, transformation, validation, reconciliation, analysis, and reporting. Strong spreadsheet and data-manipulation skills; Strong knowledge of Global regulatory frameworks such as SOX, GDPR, ISO, DORA, PCI, PSD2 and NIST. Familiarity with audit standards and frameworks (SOC 1 & 2, ISO 27001, NIST, COSO, COBIT). Knowledge of modern technologies including cloud, DevOps, application security, and AI. Experience working with/ customizing GRC tools (e.g., Archer, OneTrust, AuditBoard, Diligent). Strong analytical, communication, and problem-solving skills. Proactive approach towards available work requests and timely response. Ability to translate technical risks into business insights. Additional Qualifications Hands-on experience in IT disciplines and audit execution. Experience in global and multi-regulatory environments. Strong attention to detail and commitment to data accuracy and integrity. Ability to manage complex compliance requirements across jurisdictions. Strong organizational and proactive risk management skills. High integrity, accountability, and professional excellence. Certification Requirements Data analytics, Power BI, business intelligence, data management, or GRC-platform certifications. CISSP, CISM, CRISC, CISA, CIA, or other relevant cybersecurity, audit, or risk certifications. At CSC, compensation depends on several factors, including job location and the knowledge and experience of each individual. A reasonable estimate of the current range is €45,000 - €80,000. #CSC #CSCCareers #LI-HL1

Core Responsibilities

Collect, validate, reconcile, and report technology risk, compliance, control, and audit data in the GRC platform, maintaining datasets, dashboards, data definitions, and audit records. Coordinate IT audit and regulatory examination activities, including evidence requests, readiness assessments, remediation tracking, and improvements to compliance processes.

Requirements

Requires a bachelor’s degree in a relevant field or equivalent experience, with 2–4 years of experience in data analytics, GRC, IT audit, risk management, or cybersecurity. Candidates should have strong data manipulation and reporting skills, knowledge of regulatory and audit frameworks, familiarity with GRC tools and modern technologies, and the ability to communicate technical risks as business insights.