Senior GRC Analyst, HelloFresh
Berlin relocation support
2-5 days a week in office
Recipe box subscription service
Posted today
Recipe box subscription service
1001+ employees
Posted today
Berlin relocation support
2-5 days a week in office
1001+ employees
Company mission
HelloFresh is on a mission to change the way people eat, forever! They're collectively disrupting the food supply chain and the multi-trillion-dollar food tech industry.
Role
Who you are
- 3+ years' experience in performing compliance activities in a corporate environment related to IT General Controls (ITGC), SOC 2, ISO 27001, PCI DSS, EU NIS2, and various data privacy directives (GDPR, CCPA/CPRA, etc.)
- Ability to interpret compliance regulationsand map them to the actual implementation of systems, whilst referencing various security frameworks
- Experience supporting data privacy regulations (GDPR, CCPA)and third-party risk management programs
- Experience with developing and executing security awareness programs and trainings
- Highly organizedand detail-oriented, with an ability to work independently
- Industry compliance certifications (CISA, CISM, CISSP) are a plus
- Prior experience working in a SaaS environment, mainly Cloud and AWS-based
What the job involves
- We’re looking for a new teammate who will support the implementation and ongoing maintenance of information security compliance and certification programs, working with cross-functional internal teams and external auditing agencies
- The person will also support data protection, data privacy, and third-party vendor risk management functions
- The position will be part of the Governance, Risk & Compliance (GRC) team at HelloFresh that is responsible for creating, maintaining and improving HelloFresh’s security risk management program and remediation activities; information security and data privacy related processes, policies, and guidelines; supporting compliance and certification related activities; and driving security awareness and education
- Above all, we are looking for people who will make HelloFresh better
- We believe there are many different ways of developing skills and we love diverse experiences!
- So even if you don’t “tick all the boxes” but think you’d thrive in this role, we would really like to learn more about you
- Lead end-to-end compliance readiness for NIS2 and support alignment across other key frameworks (e.g., PCI DSS, CSRD, ISO/SOC and EU AI Act)
- Plan and execute internal control assessments and coordinate external compliance audits on a defined cadence
- Translate regulatory requirements into practical controls; drive cross-functional implementation across international teams
- Own remediation management:track findings, evidence, owners, deadlines, and report status to stakeholders
- Improve GRC maturitythrough continuous monitoring, clear documentation, and mentoring junior team members
- Lead internal assessments and coordinate external compliance audits at planned intervals
- Evaluate and validate the design and operational effectiveness of security policies, standards, and internal controls to help reduce compliance risk in the company
- Develop comprehensive and accurate reports and presentations on the compliance landscape for both technical and executive audiences
Our take
The food space has seen significant disruption in the last few years, whether it's the rapid expansion of takeaway delivery, online groceries or meal boxes. Consumer tastes are changing and there has been lots of innovation to try and get quality food in front of people more easily. HelloFresh is one of the drivers of that trend.
On the back of a boom in subscriptions during the pandemic, HelloFresh secured its place in the new food market. However, the cost-of-living crisis has meant that the company and its peers have faced dwindling subscriptions, resulting in layoffs and a need to refocus towards a more sustainable future for the business.
That said, HelloFresh still benefits from being a leader in the sector and from its B Corporation status - properties that mean it remains a top option for consumers who want to try meal kits. Only time will tell if the company can sustain its success moving forwards, at a time when its product, however enticing, is becoming less affordable for the general public.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
39% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Dec 2016
$97.1m
SERIES G
Sep 2015
$96.7m
SERIES F
Total funding: $405.1m
Company values
- Speed & Agility
- Relentless Prioritisation
- Egoless Environment
- Learning Never Stops
- Data Drivenness
- Customer Centricity
- Long Term Orientation
Company HQ
London, UK
Articles
Leadership
Dominik S. Richter
(CEO)Started his career at Goldman Sachs after graduating from WHU and LSE.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 34 more jobs at HelloFresh