Senior GRC Analyst

At Preply, we are unlocking human potential through learning.

We believe learning with a great tutor is life-changing. That’s why we match online tutors from across the globe with learners and empower them to create live language classes with AI-powered tools and learning materials. This is how we deliver progress, create engagement and keep our global community of learners motivated. So far, over 32,000 tutors have given more than 15 million lessons to learners from over 175 countries.

As we continue to scale our platform, we are committed to ensuring data security, managing risk meticulously, and maintaining compliance with the ever-evolving regulatory landscape. To help us uphold these standards, we’re looking for a Governance, Risk, and Compliance (GRC) Specialist to join our security team.

 

What you’ll be doing:

The GRC Analyst  will be instrumental in enhancing our data security posture, designing and implementing comprehensive risk frameworks, and ensuring the effectiveness of controls within our dynamic startup environment. The ideal candidate must be adept at identifying risks, analyzing them, documenting findings, and communicating results to senior stakeholders.

• Develop, maintain, and enforce data security and compliance policies across the organization.
• Design risk management frameworks and implement essential controls to mitigate risks.
• Be the main point of contact for key conversations with our B2B clients to properly represent our security posture. 
• Facilitate the remediation of identified issues and vulnerabilities within the company.
• Oversee access control processes, including system permissions, exception reviews, and approval workflows.
• Actively work with internal and external auditors to ensure compliance with policies and industry standards.
• Assess the effectiveness of implemented controls and make recommendations for improvement.
• Conduct comprehensive risk assessments, analyze potential impact, and document findings.
• Remediate inadequate controls and communicate results and insights to senior stakeholders.
• Support a culture of security awareness and education through trainings and communications.
• Implement policies and procedures to ensure their effectiveness and alignment with company objectives.
• Manage third-party supplier risk to ensure partners align with Preply’s security and compliance standards.
• Document and maintain a comprehensive risk inventory, including internal and third-party risks.
• Articulate risk findings and status updates clearly to senior stakeholders and align on strategic decisions.

 

What you need to succeed:

• Minimum 5 years of experience in a similar governance, risk, and compliance role.
• Strong understanding of data security principles, risk frameworks, and compliance requirements.
• Prior experience with access control management and the exception review and approval process.
• Demonstrated capability to work effectively with auditors and an understanding of the audit process.
• Excellent analytical and documentation skills for risk assessment and management.
• Proven ability to communicate effectively with stakeholders at all levels, including senior management.
• Familiarity with industry standards such as SOC 2,  ISO 27001, NIST, GDPR, and other relevant frameworks.
• Experience in developing training materials and promoting a culture of security awareness.
• Knowledge of third-party supplier risk management best practices.

 

Nice to have:

• Relevant professional certifications (e.g., CISM, CRISC, CISSP, or CISA).
• Experience working in the edtech industry or a fast-paced startup environment.
• Practical knowledge of implementing and managing GRC tools and platforms.

 

Why you’ll love it at Preply: 

• An open, collaborative, dynamic and diverse culture;
• A generous monthly allowance for lessons on Preply.com, Learning & Development budget and time off for your self-development;
• A competitive financial package with equity, leave allowance and health insurance;
• Not in Barcelona? We offer an attractive relocation package to join us in our Preply Barcelona Hub;
• Access to free mental health support platforms;
• Access to Gympass-partnered wellness and gym centers throughout Spain to promote and support well-being and physical health; 
• The opportunity to unlock the potential of learners and tutors through language learning and teaching in 175 countries (and counting!).

Our Principles

• Care to change the world - We are passionate about our work and care deeply about its impact to be life changing.
• We do it for learners - For both Preply and tutors, learners are why we do what we do. Every day we focus on empowering tutors to deliver an exceptional learning experience.
• Keep perfecting - To create an outstanding customer experience, we focus on simplicity, smoothness, and enjoyment, continually perfecting it as every detail matters.
• Now is the time - In a fast-paced world, it matters how quickly we act. Now is the time to make great things happen.
• Disciplined execution - What makes us disciplined is the excellence in our execution. We set clear goals, focus on what matters, and utilize our resources efficiently.
• Dive deep - We leverage business acumen and curiosity to investigate disparities between numbers and stories, unlocking meaningful insights to guide our decisions.
• Growth mindset - We proactively seek growth opportunities and believe today's best performance becomes tomorrow's starting point. We humbly embrace feedback and learn from setbacks.
• Raise the bar - We raise our performance standards continuously, alongside each new hire and promotion. We build diverse and high-performing teams that can make a real difference.
• Challenge, disagree and commit - We value open and candid communication, even when we don’t fully agree. We speak our minds, challenge when necessary, and fully commit to decisions once made.
• One Preply - We prioritize collaboration, inclusion, and the success of our team over personal ambitions. Together, we support and celebrate each other's progress.

Diversity, Equity, and Inclusion

Preply is committed to creating a diverse and inclusive environment where people from all backgrounds can thrive. Different opinions and viewpoints are key ingredients in our success as a multicultural Ed-Tech company. 

Preply will consider all applications for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, disability, age or veteran status. Together, we are The World Class.