GRC Analyst (Information Security and Compliance)

Location: Hybrid in Los Angeles, California; New York City, New York; Chicago, Illinois; or Austin, Texas. Working in the office 3 days per week is required and may change based on team and business needs.

Company

hirify.global develops software and maintains compliance with security and privacy frameworks for its customers and organization.

What you will do

• Manage the internal controls inventory, including control owners, testing procedures, related policies, and supporting documentation.
• Work with control owners to document and update process narratives and coordinate monthly and quarterly control activities.
• Support internal and external audits by scheduling interviews, requesting and reviewing evidence, and tracking follow-up actions for ISO 27001, ISO 27701, ISO 42001, SOC 1, SOC 2, and similar audits.
• Develop and maintain policies, standards, processes, and guidelines, including documentation updates, approvals, and policy review reporting.
• Analyze internal control issues, identify root causes, and collaborate on remediation efforts while promoting security and compliance best practices.
• Support customer assurance activities, security questionnaires, customer discussions, and cross-functional projects.

Requirements

• 3–5+ years of relevant experience.
• Knowledge of at least one security, privacy, and compliance practice or framework, such as SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, PCI, or HIPAA.
• Understanding of information security and privacy fundamentals.
• Understanding of AI governance or experience leveraging AI tools to improve compliance and audit efficiency.
• Confidence and willingness to ask questions and raise issues or concerns in a timely manner.

Nice to have

• Certification in CompTIA, CISSP, CISA, CISM, or a cloud platform such as AWS, Azure, or GCP.
• Familiarity with NIST, CIS, and other information security frameworks.
• Experience working for a software development company.
• Strong collaboration, attention to detail, intellectual curiosity, organizational skills, and a friendly demeanor.
• Builder mindset, willingness to share ideas and try new approaches, and focus on short- and long-term goals.
• Flexibility and adaptability in a high-growth, start-up environment.

Culture & Benefits

• Hybrid work arrangement with three required office days per week.
• Work with an in-house compliance team reporting to the General Counsel.
• Daily collaboration with departments across the organization on security, privacy, compliance, and business initiatives.
• Culture emphasizing authenticity, integrity, growth, collaboration, and customer focus.
• Full-time employment; visa sponsorship is not available.