Назад
Company hidden
3 дня назад

Junior Information Security Specialist (GRC)

Формат работы
hybrid
Тип работы
fulltime
Грейд
junior
Английский
c1
Страна
Poland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Junior Information Security Specialist (GRC): Supporting information security governance, risk analysis, regulatory compliance, and incident management across Group Companies with an accent on data protection, contractual security reviews, and policy compliance. Focus on assessing information security risks, reviewing NDAs and data-sharing agreements, and implementing corrective actions aligned with DORA, NIS2, AI Act, MAR, GDPR, ISO/IEC 27001, and NIST.

Location: Poznań, Poland; hybrid 4/1 model with 30 days of occasional remote work

Company

hirify.global is an e-commerce company serving over 21 million active buyers across six countries and collaborating with more than 164,000 partners.

What you will do

  • Support the development and compliance monitoring of security and data policies across Group Companies.
  • Conduct basic security risk reviews for NDAs and third-party data-sharing requests.
  • Support security awareness training and initiatives for employees and contractors.
  • Help verify security measures against DORA, NIS2, MAR, AI Act, GDPR, ISO/IEC 27001, NIST, and internal policies.
  • Support risk identification, physical security requirements, incident response procedures, and administrative and operational incident handling.
  • Recommend and monitor corrective and improvement actions.

Requirements

  • 0.5–2 years of experience, including internships or work placements, in information security, data protection, compliance, IT audit, or technical/legal consulting.
  • Basic understanding of information security management principles, risk assessment methodologies, and regulatory compliance.
  • Familiarity with DORA, NIS2, AI Act, MAR, GDPR, and security frameworks such as ISO/IEC 27001 and NIST.
  • Ability to review security and privacy provisions in NDAs and data-sharing agreements and identify organisational risks.
  • Completed or ongoing degree in Law, Administration, Cybersecurity, Computer Science, IT Management, or a related field is preferred.
  • Very good spoken and written English for technical and legal documentation, regulations, and international collaboration.
  • Strong communication skills, diplomacy, analytical thinking, and attention to detail.

Culture & Benefits

  • Flexible working hours in a hybrid 4/1 model; working hours may start between 7:00 and 09:00.
  • Annual performance- and company-results-based bonus.
  • 30 days of occasional remote work, well-located offices, and ergonomic work equipment.
  • Cafeteria benefits including medical, sports, lunch, insurance, and purchase voucher packages.
  • Paid job-specific English classes, training budget, internal learning platform, inter-team tourism, and an additional volunteering day.
  • International projects, internal mobility, regular manager feedback, and knowledge-sharing opportunities.

Hiring process

  • Submit a CV to hirify.global.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →