Security Engineer, Governance, Risk & Compliance (EMEA)

Location: United Kingdom - Remote

Salary: $89,000–$105,000 USD per year

Company

hirify.global provides hardened, secure, and production-ready builds of open source software for organizations including Fortune 500 enterprises and global technology leaders.

What you will do

• Support audit readiness for SOC 2 Type II, ISO 27001, and other security assurance initiatives.
• Coordinate evidence collection across Security, Engineering, Legal, HR, Product, and other functions.
• Maintain security policies, standards, procedures, control descriptions, and supporting documentation.
• Assist with control testing, risk assessments, gap analysis, remediation tracking, customer security reviews, questionnaires, and third-party risk activities.
• Maintain accurate compliance and risk information in GRC platforms such as Vanta.
• Improve GRC workflows through documentation, automation, modern tooling, checklists, runbooks, and repeatable evidence-collection practices.

Requirements

• 2+ years of experience in information security, GRC, compliance, audit, risk, IT, or a related field; equivalent practical experience is welcome.
• Experience supporting audits, control activities, risk assessments, security questionnaires, or compliance programs.
• Strong organizational, project coordination, written communication, and verbal communication skills across technical and non-technical stakeholders.
• Structured, detail-oriented approach to documentation, evidence management, and follow-through.
• Curiosity about technology and security controls, with confidence to investigate unfamiliar topics and ask questions.
• Comfort working with spreadsheets, documentation systems, ticketing tools, and GRC platforms.
• Interest in improving repetitive processes through automation, better tooling, or clearer workflows.
• Collaborative approach and ability to work across regions and functions in a fast-moving environment.

Nice to have

• Experience with SOC 2, ISO 27001, NIST, or another security or assurance framework.
• Familiarity with Vanta, Drata, or similar GRC platforms.
• Experience with control testing, risk registers, remediation plans, or policy management.
• Exposure to cloud environments, SaaS applications, software development practices, or security operations.
• Familiarity with third-party risk management or customer security reviews.
• Experience improving workflows with automation, integrations, or lightweight scripting.

Culture & Benefits

• Remote-first work with team meetups, bi-annual destination summits, and a monthly coworking, phone, and internet stipend.
• Stock options upon hire and promotion, with participation in secondary offerings and a 10-year exercise period.
• 100% covered health, vision, and dental insurance premiums for employees and dependents.
• Flexible time off and paid parental leave of 18 weeks for birthing parents and 12 weeks for non-birthing parents.
• Collaborative, cross-border environment focused on learning by doing, simplifying processes, and collective success.