GRC Analyst (SaaS)

Location: United States

Company

hirify.global is an SAP company providing a cloud-native SaaS Context Intelligence Platform that harmonizes, unifies, and governs structured and unstructured data for enterprise applications and AI systems.

What you will do

• Prepare customer security, privacy, compliance, and AI governance questionnaire responses with internal subject matter experts.
• Maintain reusable questionnaire responses, compliance materials, audit reports, certifications, policies, and control evidence.
• Execute third-party risk assessments across vendor intake, due diligence, onboarding, periodic review, remediation, and offboarding.
• Support GDPR requests by gathering information, maintaining records, tracking deadlines, and coordinating responses with Legal and Privacy.
• Support audits, evidence collection, policy reviews, risk assessments, compliance training, access reviews, issue tracking, and GRC tooling administration.
• Maintain documentation, communicate progress and blockers, and improve GRC processes while working with customers, vendors, and internal stakeholders.

Requirements

• Bachelor’s degree in information systems, cybersecurity, business, accounting, or a related field, or equivalent practical experience.
• At least two years of relevant experience in governance, risk, and compliance; information security; privacy; audit; or third-party risk management.
• Experience preparing customer security or compliance questionnaire responses and reviewing vendor security and privacy documentation.
• Working knowledge of common security and compliance frameworks, GDPR concepts, and privacy request workflows.
• Experience in or supporting a cloud, enterprise software, or SaaS environment, including an understanding of shared security responsibilities.
• Strong written and verbal communication skills, attention to detail, sound judgment, and the ability to manage multiple requests and deadlines.
• Ability to collaborate across Security, Legal, Privacy, Product, Engineering, Sales, Procurement, and other business functions.
• Proficiency with documentation, ticketing, or workflow systems and the ability to learn new tools and processes.

Nice to have

• Experience within SAP or familiarity with SAP privacy, vendor management, policy management, and compliance processes.
• Familiarity with Master Data Management platforms and related security and privacy considerations.
• Experience with trust centers, questionnaire management tools, Jira, ServiceNow, or Confluence.
• Experience supporting SOC 1, SOC 2, ISO 27001, HITRUST CSF, or privacy framework audits and assessments.
• Familiarity with AI governance, AI risk assessments, or customer AI questionnaires.
• Certifications such as CISA, CRISC, Security+, CIPP, CIPM, or equivalent credentials.

Culture & Benefits

• Distributed workforce with flexible work arrangements.
• Collaborative culture guided by Customer First, Better Together, Simplify and Share, Own It, and Always Better Than Yesterday values.
• Equal opportunity workplace with reasonable accommodation for applicants with disabilities.