Security Governance Analyst

At Scor, we blend the art and science of risk to build more resilient societies. Technology is at the heart of this mission, powered by a global team of 200+ professionals across three hubs. Guided by our values--Collaboration, Courage, Care, Open-Mindedness, and Integrity--we develop solutions that help insure the world.

At our brand-new Shared Business Platform (SBP) in Bucharest, we offer a dynamic environment where career growth is actively supported through internal mobility, globally recognized certifications, and continuous professional development. We value work-life balance, offering flexible work arrangements, and wellbeing initiatives that help you thrive both personally and professionally. Now, let's explore this exciting opportunity so that you can be part of our mission.

Key Responsibilities

• Ensure compliance with security standards across systems and applications.
• Monitor and report vulnerabilities, ensuring timely remediation.
• Coordinate with technical and business teams to address security issues.
• Deliver reports on security metrics to the Governance team and CISO.
• Manage control programs using manual and automated tools.
• Communicate compliance requirements to stakeholders.
• Support remediation efforts and provide guidance to teams.
• Maintain inspection procedures and automated controls.
• Contribute to security governance committees and initiatives.

Key Duties

• Track application of security standards.
• Report on vulnerability status.
• Facilitate cross-team communication.
• Provide consolidated reporting.
• Oversee recurring control activities.
• Coordinate compliance communications.
• Assist with mitigation planning.
• Maintain inspection documentation.
• Participate in governance activities.

We're looking for a candidate who embodies our Security Principles--defend and support the business, and promote responsible information security behavior--and lives our Team Values: professionalism, ethics, transparency, and team spirit.

You bring:

• Proven experience in security governance, risk management, or compliance
• Solid knowledge of security frameworks (e.g., ISO 27001, NIST)
• Hands-on experience with vulnerability management and reporting
• Strong analytical, problem-solving, and communication skills
• Ability to collaborate across teams and functions
• Familiarity with automated security controls and inspection tools

Required Education

• Bachelor's degree in Information Security, Computer Science, or a related field
• Certifications such as CISSP, CISM, or CRISC are a strong plus