Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
83
Хорошая вакансия
развернуть
Обязанности чётко очерчены и дают практический опыт в ключевых направлениях GRC в зрелой SaaS-компании; явных рисков перегрузки нет, но данных о зарплате нет.
Кликните для подробной информации
Понятные задачиРабота над продуктомРост в GRC
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security & Compliance Analyst (GRC): Managing security questionnaires, trust documentation, and compliance activities for an enterprise AI-powered revenue platform with an accent on ISO 27001, SOC 2, GDPR, and scalable security knowledge systems. Focus on automating questionnaire workflows, coordinating audit evidence, maintaining the Trust Portal, and tracking security and privacy risks.
Location: Remote in Mexico; Guadalajara
Company
hirify.global builds an AI-powered Predictive Revenue System for enterprise revenue teams, combining revenue insights and AI innovation.
What you will do
Own the end-to-end process for triaging, completing, and tracking customer and prospect security questionnaires.
Maintain a centralized knowledge base of approved security answers and use questionnaire automation tools such as Conveyor, Vanta, Drata, or similar.
Build and maintain the public-facing Trust Portal and customer-facing collateral, including one-pagers, FAQs, security overviews, and data flow documentation.
Support compliance activities for ISO 27001, SOC 2, GDPR, and other applicable frameworks, including evidence collection with auditors and internal control owners.
Support user access reviews, policy maintenance, control audits, security and privacy risk tracking, and security awareness training content.
Requirements
3+ years of experience in information security, GRC, compliance, or a related field.
Experience handling security questionnaires or working within a questionnaire management process.
Familiarity with maintaining documentation, knowledge bases, or content libraries.
Working knowledge of ISO 27001, SOC 2 Trust Services Criteria, GDPR, and other common security standards.
Strong written communication skills and the ability to translate security concepts into clear, accessible language.
Comfort joining customer-facing calls and supporting security conversations.
Strong organization and attention to detail; collaborative and comfortable working in a support capacity.
Ability to handle proprietary and sensitive information with discretion.
Nice to have
CISA or a similar certification.
Culture & Benefits
Inclusive and supportive workplace focused on culture add rather than culture fit.
Collaborative GRC team with shared ownership, mutual trust, and direct communication.
Customer-inspired approach connecting decisions to customer success.
Remote opportunity based in Mexico.
Comprehensive company benefits are available.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →