Discover Verified Opportunities That Move You Forward

About the Role

Kora is hiring a Cybersecurity GRC Analyst to strengthen its information security governance, risk management, and compliance programs. This role ensures that security policies, controls, and processes align with regulatory requirements, industry standards, and business objectives.

The analyst will assess risks, support audits, and help drive a strong security and compliance culture across the organization.

Key Responsibilities

• Develop and maintain security policies aligned with ISO 27001, NIST CSF, and CIS Controls.

• Support implementation and monitoring of governance programs.

• Drive security awareness initiatives and compliance culture.

• Conduct enterprise, vendor, application, and infrastructure risk assessments.

• Maintain and update the organization’s risk register.

• Perform control gap assessments and recommend remediation.

• Support vendor risk management.

• Track and report on risk treatment plans.

• Ensure compliance with PCI DSS, SOC 2, GDPR, and other regulations.

• Coordinate internal and external audits, including evidence collection.

• Monitor compliance posture and track remediation of findings.

• Assist in compliance reporting and dashboard preparation.

• Collaborate with IT and security teams to ensure effective controls.

• Support incident response from a compliance perspective.

• Conduct control testing and continuous monitoring.

• Maintain accurate documentation of policies, risks, and controls.

Requirements

• 2–4 years’ experience in cybersecurity, IT risk, compliance, or audit.

• Bachelor’s degree in a relevant field.

• Strong knowledge of frameworks (ISO 27001, NIST, SOC 2, PCI DSS).

• Experience with risk assessment methodologies and control frameworks.

• Familiarity with regulatory requirements (financial services, data protection laws).

• Experience with GRC tools.

• Excellent communication and interpersonal skills.

• Positive attitude and ability to work under pressure.

Key Skills

• Strong analytical and risk assessment mindset.

• Attention to detail and documentation skills.

• Effective communication and stakeholder management.

• Ability to translate technical risks into business impact.

• Organizational and project management abilities.

• Integrity, professionalism, and continuous learning.

Benefits

• Health insurance

• Sponsored and tailored training

• Paid parental leave & time-off

• Flexible work style

• Low-interest loans

• Group Life Insurance

• Up to four therapy sessions monthly

• Birthday day-off 🎂 🎉

• Employee interest groups & supportive communities

• Collaborative company culture

Equal Opportunity Employer

Kora is committed to diversity and inclusion. Employment decisions are based on qualifications, experience, and business needs. We strongly encourage applications from underrepresented communities.

About the Role – SOC Analyst

As a SOC Analyst, you will play a critical role in safeguarding Kora’s security posture. You’ll monitor, detect, analyze, and respond to cybersecurity threats in real time, leveraging advanced tools and processes to mitigate risks.

Key Responsibilities

• Monitor security events via SIEM, EDR, IDS/IPS, firewalls, and cloud tools.

• Analyze logs and alerts to identify anomalies.

• Perform triage to assess severity and impact.

• Escalate validated incidents per defined procedures.

• Investigate and respond to threats (phishing, malware, unauthorized access).

• Collaborate with IT and engineering teams to contain and remediate incidents.

• Document incidents, actions, and lessons learned.

• Conduct post-incident reviews and root cause analysis.

• Leverage threat intelligence feeds to detect emerging risks.

• Perform proactive threat hunting.

• Update detection rules and use cases.

• Support vulnerability management and patch validation.

• Prepare SOC reports and dashboards.

• Develop and update incident response playbooks.

Requirements

• 2–4 years’ experience in SOC, cybersecurity, or IT security.

• Bachelor’s degree in a relevant field.

• Hands-on experience with SIEM (Splunk, QRadar), EDR (CrowdStrike, Defender), and firewalls.

• Strong understanding of network protocols, operating systems, and attack vectors.

• Familiarity with incident response frameworks (MITRE ATT&CK, NIST, ISO 27001).

• Scripting/automation skills (Python, PowerShell, Bash) preferred.

• Excellent communication and interpersonal skills.

• Positive attitude and resilience under pressure.

Key Skills

• Analytical and investigative mindset.

• Ability to thrive in a fast-paced, 24/7 environment.

• Attention to detail and critical thinking.

• Strong documentation and communication abilities.

• Team collaboration across functions.

• Continuous learning to stay ahead of evolving threats.

Benefits

• Health insurance

• Sponsored training tailored to your growth

• Paid parental leave & time-off

• Flexible work style

• Low-interest loans

• Group life insurance

• Up to four therapy sessions monthly

• Birthday day-off 🎂 🎉

• Employee interest groups & supportive communities

• Inclusive company culture with a collaborative team

Equal Opportunity Employer

Kora is committed to diversity and inclusion. Employment decisions are based on qualifications, experience, and business needs. We strongly encourage applications from underrepresented communities.