GRC Analyst (Cybersecurity)

Location: Copenhagen, Denmark; remote work allowed

Salary: Competitive

Company

hirify.global provides secure user authentication and digital signature solutions based on electronic identities, including MitID and other European eIDs.

What you will do

• Execute routine security control testing and maintain key risk indicators.
• Maintain the public security trust center and standard security documentation.
• Support customer security questionnaires, compliance inquiries, and vendor assessments.
• Assist with external audit readiness, policy reviews, and ISMS compliance activities.
• Evaluate third-party vendors and cloud subprocessors before onboarding.
• Triage vulnerability disclosures, assess severity, and coordinate remediation with engineering.

Requirements

• 3+ years of experience in governance, risk and compliance, IT audit, or risk management.
• Solid understanding of security controls, ISO 27001, SOC 2, and risk methodologies.
• Ability to translate technical vulnerability data into actionable risk assessments.
• Ability to balance security requirements with engineering workflows and business agility.
• Strong written and verbal communication skills.

Nice to have

• Experience with hyperscalers and cloud platforms such as Microsoft Azure, AWS, or Google Cloud in a SaaS environment.
• Experience with process automation and configuring AI agents.

Culture & Benefits

• Remote work is allowed.
• Central office near public transit.
• Paid holiday.
• Pet-friendly workplace.
• Focus on work-life balance.