Security Risk and Compliance Analyst
AutoStore System, Inc
- # Security Risk and Compliance AnalystApplylocations: Oslo, Norway: Nedre Vats, Norway: Stavanger, Norwaytime type: Full timeposted on: Posted Yesterdaytime left to apply: End Date: July 27, 2026 (23 days left to apply)job requisition id: JR102567The Security Risk and Compliance Analyst is the operational engine of AutoStore's Technology Risk and Compliance function, turning frameworks and policies into working processes, maintaining the evidence base for assurance activities, and keeping the compliance position current and visible. Reporting to the CISO, the role works across IT, Legal, Finance, HR, and Product to ensure regulatory and certification obligations are met, controls are documented and evidenced, and employees understand and act on their security responsibilities.The Security Risk and Compliance Analyst works closely with the Senior Risk and Compliance Professional (SRCP) on a day-to-day basis, operating within the frameworks and programme structure the SRCP owns, and escalating material issues to the CISO. AI is a growing part of this role, both as a practical tool for working more effectively, and as a subject area that requires operational support across governance, risk assessment, and awareness.**Control Assurance and Audit*** Maintain control documentation, ownership records, and evidence in line with the framework owned by the SRCP, supporting the assurance and testing cycle, coordinating with control owners, and flagging gaps or discrepancies to the SRCP or CISO as appropriate.* Coordinate IT General Controls (ITGC) and Internal Control over Financial Reporting (ICFR) requirements, maintaining documentation of scope, testing schedules, and results, and acting as the primary operational interface for cybersecurity audit activities, tracking findings to closure.* Own the operational management of the risk exception and control deviation process, intake, documentation, approval tracking, expiry management, and escalation of material exceptions to the CISO.**Third Party Assurance & Reporting*** Execute the supplier assurance programme, issuing questionnaires, tracking responses, maintaining the supplier risk register, and escalating gaps to the CISO, ensuring outcomes feed into third-party risk reporting.* Maintain accurate records across all areas of responsibility, compliance register, control evidence, audit findings, exception log, and supplier outcomes, and contribute timely, structured data to the SRCP’s dashboards and reporting outputs.* Proactively flag changes in compliance or assurance status to the SRCP and CISO, and maintain documentation to a standard that supports internal visibility and external audit or regulatory scrutiny.**AI Governance and Support*** Support the SRCP in the operational delivery of AutoStore's AI governance programme, maintaining the AI tools register, coordinating risk assessments of AI tools submitted for approval, tracking assessment outcomes, and keeping records current as the AI landscape evolves.* Monitor the AI obligations inventory maintained by the SRCP, flagging where new tool adoptions, regulatory updates, or business changes may affect AutoStore's compliance position under the EU AI Act or related frameworks.* Apply AI-assisted tools across day-to-day GRC work, compliance tracking, evidence management, risk analysis, and reporting, and contribute practical experience of what works to the SRCP’s broader assessment of AI-assisted GRC capabilities.**Security Education & Awareness*** Lead the design and delivery of AutoStore's security and privacy awareness programme, delivering targeted campaigns (phishing simulations, data handling, access management, AI use, social engineering) in collaboration with HR and Communications, and managing the awareness training platform.* Develop and maintain metrics that measure genuine behavioural change, not just participation, tracking trends in phishing results, training completion, and incident patterns to continuously improve programme targeting and content.* Ensure AI use is a substantive topic within the awareness programme, not a single annual module but an evolving thread that reflects how AI tools are being used across the business, the risks they introduce, and the behaviours AutoStore expects.**Key Qualifications****Essential*** Experience in a compliance, GRC, risk, or information security role with hands-on operational delivery responsibilities* Familiarity with control frameworks, including documenting, evidencing, and testing controls, and supporting audit activities* Strong organisational skills, with the ability to manage multiple concurrent workstreams and maintain accurate records* Clear written communication skills, able to translate compliance requirements into plain-language guidance for non-specialists**Desirable*** ISO 27001 Lead Implementer/Auditor certification, or equivalent* Experience delivering security awareness programmes, including phishing simulations* Experience with GRC tooling or security awareness training platforms* Familiarity with AI governance considerations and the compliance and risk implications of AI tool adoption**We Offer:*** **A Collaborative and Inclusive Culture** where we celebrate and value everyone’s contributions, encouraging diverse perspectives in decision-making.* **Work-Life Balance & Well-being**: We offer 1 hour per week of paid exercise, health insurance, and a generous pension plan, prioritizing your mental and physical well-being.* **A Creative and Safe Workplace** by joining a company experiencing rapid growth, with the stability of being Norway’s first unicorn listed on the Oslo Stock Exchange.* **International and Supportive Environment** within a Norwegian multinational that values collaboration and innovation.**The location for this role is Oslo, Stavanger, or our headquarters in Nedre Vats.****Application deadline: July 26th**. Please note that we review applications continuously—if this opportunity excites you, we encourage you to apply as early as possible! All inquiries are treated confidentially.If you are applying from outside of Norway please indicate that you will be relocating to be considered.*AutoStore does not accept agency resumes or assistance for this role. Please do not forward resumes to our job's alias or AutoStore employees. AutoStore is not responsible for any fees related to unsolicited resumes. This policy should be respected.*
- J-18808-Ljbffr AutoStore System, Inc
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Security Risk and Compliance Analyst in Wind Lake, WI vacancy
- ## Security Risk and Compliance AnalystApplylocations: Oslo, Norway: Nedre Vats, Norway: Stavanger, Norwaytime type: Full timeposted on: Posted Yesterdaytime... ...requisition id: JR102567The Security Risk and Compliance Analyst is the operational engine of AutoStore's Technology Risk...SuggestedRelocation
AutoStore System
Waterford, WI2 days ago $55 per hour
...a financial services organization , is seeking a FIU Analyst to join their team. As a FIU Analyst, you will be part... ...monitoring alerts Prepare SAR narratives and maintain compliance documentation Escalate high‑risk or complex compliance issues Ensure compliance with AML...SuggestedContract workTemporary workFor contractorsWork experience placementManpowerGroup Global, Inc.
Waterford, WI5 days ago- IT Compliance Analyst Location: Little Canada MN Contract: 12+ months contract to hire Pay range: $36 - $38/hr on W2 Our Fortune 500 client... ...audits to ensure compliance with accessibility standards, security requirements, and brand guidelines. Provide training and support...SuggestedContract work
$40 - $45 per hour
...Associate to support the Regulatory Affairs team by reviewing labeling, advertising, and promotional materials, ensuring regulatory compliance, supporting regulatory submissions, and collaborating with cross-functional teams. This role also supports new product...SuggestedHourly payManpowerGroup Global, Inc.
Waterford, WI1 day ago- The Regulatory Specialist position supports all activities of the Regulatory and Technical Affairs Department. The primary focus of the role is vendor approval, maintaining required vendor documentation, handling customer and consumer complaints, and administration of ...SuggestedFull timePart timeWork experience placementWork at office
A L SCHUTZMAN COMPANY
Waukesha, WI4 days ago $25 - $30 per hour
...Credentialing Specialist Responsibilities: Update all required compliance items for states Work within web portals to ensure... ...records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable: The...Hourly payLocal areaLHH Recruitment Solutions
New Berlin, WI5 days ago- ...A L SCHUTZMAN COMPANY is hiring a Regulatory Specialist in Waukesha, Wisconsin. This role involves vendor approval, handling compliance, customer complaints, and assisting with product documentation. The ideal candidate has a Bachelor's degree in Food Science or a related...
A L SCHUTZMAN COMPANY
Waukesha, WI3 days ago $45.76k - $52k
...maintaining supplier documentation to meet regulatory and quality system requirements, and performing product analysis to ensure compliance with customer specifications. Responsibilities Verify and approve new raw material suppliers. Maintain up-to-date documentation...Permanent employmentWork experience placementRelocation package- ...position reports to: Procurement Manager __ In this role, you will have the opportunity to lead transportation operations, trade compliance, and product classification within the assigned business area. Each day, you will be responsible for coordinating with internal...Full timeTemporary workWork at officeLocal areaMonday to Friday
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Security Risk and Compliance Analyst. Be the first to apply!
