Information Security Governance, Risk & Compliance Manager

Location: Europe; remote work opportunity

Company

hirify.global is hiring for an information security governance, risk, and compliance function.

What you will do

• Own and develop the information security GRC strategy, roadmap, operating model, and governance cadence.
• Lead security governance, regulatory assurance, cyber risk, third-party security risk, policy lifecycle, and security-awareness oversight.
• Coordinate SOC 2, DORA/CySEC-related assurance, internal and external audits, and regulatory requests.
• Establish ownership for controls, risks, exceptions, evidence, and remediation; maintain risk and exception registers and escalate material risks.
• Lead ICT supplier tiering, due diligence, reassessment, and high-risk supplier decisions.
• Build and manage the GRC team, prepare reporting for the CISO and executive stakeholders, and improve GRC efficiency through automation, reusable evidence, better data quality, and responsible AI-assisted workflows.

Requirements

• Strong practical experience in information security GRC, cyber or technology risk, security compliance, or assurance.
• Hands-on experience with recognized frameworks such as SOC 2, ISO 27001, DORA, PCI DSS, NIST CSF, COBIT, or similar.
• Experience establishing or operating security controls, risk registers, exception processes, and assurance programs.
• Strong understanding of control design, operating effectiveness, evidence quality, findings, and remediation.
• Experience coordinating internal or external audits and regulatory or assurance activities.
• Practical experience with cyber risk assessment, risk treatment, risk acceptance, and escalation, plus understanding of third-party and ICT supplier security risk.
• Ability to translate regulatory and security requirements into practical controls and processes and manage stakeholders across technical, business, and executive audiences.
• Sufficient technical understanding of cloud, infrastructure, identity, IT operations, and product development to work effectively with technical teams.
• Experience leading a team, function, program, or complex cross-functional initiatives, with strong ownership, prioritization, and decision-making skills.

Culture & Benefits

• Remote work opportunity from Europe.
• 20 paid vacation days and 10 paid sick leave days per year.
• Public holidays according to company policy.
• Medical, professional education, language learning, and wellness budgets.