GRC Specialist (Cybersecurity)

Location: Remote from the UK, Germany, Austria, Poland or Serbia; EMEA remote

Company

hirify.global automates security compliance for companies working with frameworks including ISO 27001, GDPR, TISAX and SOC 2.

What you will do

• Build and maintain compliance frameworks in the hirify.global platform, including ISO 27001, TISAX, SOC 2, GDPR, NIS 2, DORA, ISO 27017/27018, ISO 42001 and C5.
• Lead customer internal audits from kickoff through final reporting and keep multiple audits on schedule.
• Implement ISO 27001 and related frameworks for customers end to end.
• Create and maintain policies, automated checks, evidence templates, compliance playbooks and security awareness training.
• Translate compliance gaps and auditor feedback into improvements for product, engineering and team practices.
• Collaborate with customer success, product, founders and certification partners, including training auditors on the hirify.global platform.

Requirements

• German at C1/C2 level and fluent English are required.
• 3+ years of hands-on information security and GRC experience.
• At least one successful ISO 27001 certification project led as an implementer or auditor in a startup or mid-market company.
• Experience running at least two internal audits and using hirify.global or a similar GRC platform.
• Deep experience with at least one framework beyond ISO 27001, such as TISAX, SOC 2, GDPR or NIS2.
• Strong project management, written communication, ownership and prioritization skills, plus a technical bachelor's degree or equivalent hands-on experience.

Nice to have

• Experience mentoring or coaching colleagues in compliance, audit or GRC.
• Startup experience.
• PECB ISO 27001 Lead Auditor certification or equivalent.

Culture & Benefits

• 100% remote work with a virtual office in Gather.
• Local salaries at or above market rates, plus an equity package.
• €1,000 annual personal development budget, home office budget and access to co-working spaces.
• 26 days of holiday plus local public holidays and comprehensive health coverage.
• Annual retreats, company events and the latest technology equipment.

Hiring process

• Screening call with the Talent team.
• Take-home assessment followed by a 1.5-hour assessment review and interview with the CS Lead and CEO.
• 45-minute final founder interview with the Co-Founders, CTO and CISO.