GRC Analyst

Location: London; on-site

Company

hirify.global develops enterprise AI products that help investment banks, private equity funds, and investment firms improve financial workflows.

What you will do

• Support customer trust and security assurance processes, including customer security inquiries and risk assessments.
• Coordinate customer security reviews and provide accurate, consistent, and timely responses with internal stakeholders.
• Maintain and improve security documentation and customer response materials.
• Work with security and engineering teams to explain technical controls in a customer-facing context.
• Support compliance initiatives, evidence collection, and audit readiness across SOC 2, ISO 27001, ISO 42001, the EU AI Act, UK Cyber Essentials, and GDPR.
• Identify recurring gaps and streamline trust-related workflows as enterprise customer volume grows.

Requirements

• Experience supporting customer-facing security, compliance, or trust functions at a SaaS or cloud-native company.
• Ability to translate technical security concepts into clear, concise written responses.
• Understanding of enterprise security expectations covering cloud infrastructure, access control, data protection, and incident response.
• Strong attention to detail, clear communication skills, and the ability to manage multiple parallel requests.
• Sound judgment when handling sensitive or ambiguous security questions.
• Interest in the intersection of security, compliance, and customer engagement.

Nice to have

• Experience with security questionnaires, audits, or third-party risk assessments.
• Exposure to AWS or GCP, Kubernetes, and IAM security concepts.
• Experience improving or scaling trust, GRC, or compliance processes in growing organizations.
• Experience supporting enterprise customers or working with financial services customers on security, risk, and compliance topics.

Culture & Benefits

• Fast-paced startup environment focused on ambitious, technically demanding problems.
• Autonomous, ownership-oriented work with room to operate in ambiguity.
• Collaborative, organized, thoughtful, and curious working style.
• Opportunity to work at the intersection of AI, technology, finance, security, and compliance.