Senior Security Risk Analyst (GRC)

Location: Remote within the United States

Base salary: $132,600–$195,000 USD per year, plus potential equity grants.

Company

hirify.global operates a marketplace spanning hirify.global, Wolt, and Deliveroo, supported by global governance, risk, and compliance programs.

What you will do

• Lead global security risk assessments and negotiate treatment plans with risk and control owners.
• Translate regulatory and framework changes into practical, effective controls.
• Analyze day-to-day control operation, threat intelligence, threat actors, and attack vectors.
• Manage policy exceptions through compensating controls or documented risk acceptance.
• Own risk metrics and reporting for security or engineering areas and help reduce measurable risk.
• Build automations and shape GRC tooling, processes, and team strategy.

Requirements

• 4+ years of experience in security risk, GRC, or a related field.
• Bachelor’s degree in a technology-related field, or an additional four years of relevant technology experience.
• Fluency in risk management frameworks, including the NIST Cybersecurity Framework.
• Ability to translate technical risk and complex control requirements into clear guidance for technical and non-technical audiences.
• Experience owning risk metrics, reporting, and program effectiveness.
• Experience automating workflows or interest in agentic AI workflows.

Nice to have

• Experience implementing or using GRC tooling.
• Experience with AI-related risk.
• Experience in controls assurance and effectiveness testing.

Culture & Benefits

• Cross-functional collaboration across GRC, security, engineering, and business teams.
• 401(k) plan with employer matching.
• Medical, dental, vision, disability, and basic life insurance.
• 16 weeks of paid parental leave, paid time off, paid sick leave, and 11 paid holidays.
• Wellness, commuter, family-forming assistance, and mental health benefits.