Senior Information Security GRC Specialist

About the role

RecoTek is Reconomy’s new centralized technology hub located in Bucharest, Romania, officially launched in February 2024. Serving as the backbone of Reconomy’s tech operations, it consolidates inhouse expertise across all Reconomy brands to accelerate platform development and enhance service delivery. Reconomy is an international circular economy specialist that combines technology, skills and incredible people to enable businesses to better manage their resources, helping reduce waste, optimise their supply chains, and contribute in a meaningful way toward the circular economy
Reconomy is bending the edges of linear business models across the world, integrating circular economy strategies and processes into everyday operations. We have the tools, talent and technology that enable customers to harness the full and inherent value of their resources, with integrated global operations in over 80 countries across the world.
Reconomy’s full range of capabilities are organized into 3 ‘loops’: Recycle, Comply and Re-use, each providing opportunities for circularity within the wider resource cycle.
Recycle loop is utilising the latest technology and data to enable customers to make the best possible use of their materials.
Comply loop is enabling customers to solve increasingly complex environmental regulatory challenges using data, expert knowledge and thought leadership to drive business accountability across the globe.
Re-use loop is providing intelligent technology platforms and agile delivery models for pre-retail logistics and product returns, fulfilment and processing, on behalf of many of Europe’s largest retailers.

Are you passionate about information security, governance, and driving meaningful change in a global organisation? Join Reconomy as a Senior Information Security GRC Specialist on a 12-month fixed-term contract and play a key role in shaping and strengthening our Governance, Risk & Compliance (GRC) programme across an international business operating in more than 25 countries .
In this role, you'll work at the intersection of security, technology, and business, partnering with senior stakeholders to ensure our security and compliance programmes not only meet evolving regulatory requirements but also enable business growth.
You'll lead strategic compliance initiatives, oversee major certification audits such as ISO 27001 and SOC 2 , manage relationships with external auditors, and drive the continuous evolution of our GRC framework. From implementing new compliance standards and improving risk management processes to introducing automation and developing executive-level reporting, you'll have the opportunity to make a visible impact across the organisation.
Beyond delivering operational excellence, you'll act as a trusted advisor to the business, mentor colleagues, and collaborate with cross-functional teams to build a strong culture of security and compliance.
This is an excellent opportunity for an experienced GRC professional looking to take ownership of high-impact initiatives, work in a collaborative international environment, and influence the future of information security within a fast-growing global organisation.

5+ years of experience in Information Security Governance, Risk & Compliance (GRC) or a similar compliance-focused role.
Proven experience leading security and compliance programmes in complex or international organisations.
Strong knowledge of industry frameworks and standards such as ISO 27001, SOC 2, GDPR , and other relevant regulatory requirements.
Experience planning, coordinating, and successfully managing internal and external audits.
Excellent understanding of risk management principles and the ability to translate regulatory requirements into practical business solutions.
Strong stakeholder management and communication skills, with confidence engaging technical teams, business leaders, and senior executives.
Experience working across multiple business functions in a collaborative, fast-paced environment.
Hands-on experience with GRC platforms and security compliance tools.
Strong analytical and problem-solving skills, with the ability to interpret data and provide meaningful insights.
Bachelor's degree in Information Security, Cyber Security, Computer Science, Risk Management, or a related field (or equivalent experience).
Professional certifications such as CISA, CISM, CRISC , or equivalent are highly desirable.
A proactive mindset with a passion for continuous improvement, process optimisation, and driving positive change.
Experience within a global organisation, high-growth environment, or private equity-backed business would be an advantage.
Experience with vendor risk management, privacy programmes, cloud compliance, or security automation is a plus.
Willingness to travel internationally when required (up to 20%).
You'll be a great fit if you are:
A strategic thinker who can balance business objectives with security and compliance requirements.
A confident communicator who can influence stakeholders at all levels of the organisation.
Comfortable leading complex initiatives while managing multiple priorities.
Passionate about building scalable, efficient, and effective GRC processes.
Curious, collaborative, and always looking for opportunities to improve the way we work.
Someone who embodies Reconomy's values: Real, Inclusive, Collaborative, and Inventive .