Cyber Risk & GRC Analyst

Cyber Risk & GRC Analyst

About NewCold

NewCold is a global leader in advanced food logistics. Our warehouses and transport network sit at the center of the food supply chain. Connecting the world’s major food manufacturers with retailers and food service providers.

Our goal is to keep the world’s food fresh and safe with our proprietary technologies and innovative solutions.

NewCold designs, builds, and operates state-of-the-art cold storage facilities that are highly automated. We push the boundaries of logistics with end-to-end storage and transport operations that add greater resilience, efficiency, and sustainability to supply chains on four continents. And we are growing rapidly.

To support our rapid growth, we’re constantly looking for talented people to join our team. Want to be a part of a dynamic, forward-thinking environment? Join us!

About the role:

NewCold's cyber risk function is scaling fast: risk assessments, supplier due diligence, and (ISO 27001 and NIS2-driven governance work have grown to a volume that needs a dedicated person to provide the right level of focus.

This role exists to keep that pipeline moving: triaging intake, running the risk register day-to-day, chasing evidence collection, and turning raw risk data into reporting that leadership can act on. It's a hands-on, high-throughput role rather than a strategic or policy-setting one.

We're looking for someone who's actually run a risk register under time pressure, not just someone who can talk fluently about frameworks.

Must-have experience:

• 3–5 years in cyber security risk management, IT risk, or GRC, in a regulated or complex enterprise environment.
• Hands-on risk register ownership: risk articulation, scoring, treatment tracking, and producing executive-ready reporting.
• Supplier/third-party risk assessment execution: questionnaire-based due diligence, evidence review, and posture evaluation, done independently and at volume.
• High-volume triage: proven ability to prioritize a busy intake queue based on risk and business impact, without things slipping.
• Working knowledge and experience with frameworks such as: ISO/IEC 27001/27002, NIST CSF, or CIS Controls with the ability to map control evidence to risk outcomes.
• Communication & cross-cultural stakeholder skills: strong written and verbal communication skills, with the ability to adapt tone and approach across internal and external stakeholders, from technical engineers to senior business leaders to third-party suppliers.
• Comfortable operating across cultures and communication styles given NewCold's multinational footprint, and able to build trust and drive follow-through with stakeholders from different regional and organisational backgrounds.
• Stakeholder follow-through: comfortable chasing technical teams, procurement, IT, and business stakeholders repeatedly until items close out.

Preferred / nice-to-have:

• Exposure to supplier tiering, criticality assessment, or ongoing supplier monitoring models.
• Familiarity with OT/industrial risk concepts (e.g. IEC 62443, Purdue model) would be a plus given NewCold's OT environment.
• Certified in Risk and Information Systems Control (CRISC).
• Experience with GRC or workflow tooling (e.g. Archer, ServiceNow GRC, Jira, Monday.com or equivalent).
• Prior experience operating across multiple regions/time zones.
• Understanding of risk governance concepts: risk appetite, residual risk, risk acceptance, escalation paths.

How success looks like in the first 6 months:

• Risk register is current, accurately scored, and reporting cadence is reliable without prompting.
• Supplier risk assessment backlog is under control, with clear tiering and a repeatable evidence-review process.
• Stakeholders across regions know who to go to and trust the follow-up will happen.

Why join NewCold?

At NewCold, our people are our most valuable asset. We take pride in our team-oriented culture, where innovation and collaboration are at the heart of everything we do.
What we offer:

• A supportive and collaborative environment.
• The opportunity for professional growth in a fast-scaling, international company.
• The chance to have real impact and innovate alongside other bright minds.
• The challenge of transforming the future of cold storage and food logistics.
• A strong commitment to employee well-being.

Whether you’re a seasoned expert or just starting your career, NewCold provides the opportunities and challenges that allow you to grow and excel. Ready to turn your curiosity into impact?

How to apply:
If you are interested in this vacancy and would like to apply, please make sure that you leave your CV in English. Suitable candidates will be invited for a first interview with the hiring manager. A second interview will follow with a wider group of NewCold team members.

Can we welcome you on board as our new Cyber Risk & GRC Analyst and help continue our successful growth?