Назад
Company hidden
3 дня назад

Senior Specialist, Assurance and Audit Coordination (Information Security GRC)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Spain/Romania/Germany +1 еще
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Specialist, Assurance and Audit Coordination (Information Security GRC): Coordinating complex audits, examinations, evidence collection, and remediation tracking across information security, ICT risk, TPRM, and operational resilience with an accent on traceable evidence workflows, audit portfolio administration, and controlled stakeholder intake. Focus on preparing auditor-facing evidence packs, tracking findings and closure evidence, administering GRC workflows, and identifying opportunities to automate repetitive assurance work.

Location: Hybrid, with onsite collaboration and remote work, based in Barcelona, Spain; Berlin, Germany; Bucharest, Romania; or Vienna, Austria. Employees may additionally work from a city or country of their choice for 25 days per year.

Company

hirify.global operates a digital investment platform offering cryptocurrencies, crypto indices, stocks, precious metals, and commodities to more than 7 million customers across Europe.

What you will do

  • Coordinate the daily intake of audit engagements and evidence requests with domain and control owners.
  • Collect, organize, quality-check, and maintain evidence with reliable version control and deadline tracking.
  • Administer the audit calendar, engagement register, findings inventory, scopes, owners, dependencies, and statuses.
  • Prepare evidence packs, response trackers, meeting agendas, action logs, and status reports for auditors, regulators, and management.
  • Track remediation plans and closure evidence, identify overdue actions, coordinate evidence reuse with control-testing teams, and escalate delivery risks.
  • Administer GRC, ticketing, and collaboration workflows while identifying safe opportunities to automate repetitive administrative work.

Requirements

  • 4–7 years of relevant experience in audit coordination, technology risk, information security GRC, regulatory compliance, control assurance, or structured programme management.
  • Proven ability to manage competing deadlines, handle sensitive information with sound judgement, and follow up with cross-functional stakeholders.
  • Strong understanding of audit evidence standards, control documentation, and the findings management lifecycle in a regulated environment.
  • Excellent organization, attention to detail, and written communication in professional English.
  • Ability to maintain highly reliable records and response trackers.

Nice to have

  • Working knowledge of DORA, ISO 27001, SOC 2, or third-party risk management.
  • German language skills.

Culture & Benefits

  • Hybrid working model combining onsite collaboration and remote work, with 25 additional days per year to work from a city or country of choice.
  • Competitive total compensation aligned with a pay-for-impact policy and participation in a stock option plan.
  • Confidential coaching, counselling, and mental health resources through OpenUP.
  • Annual leave, plus three additional paid days in 2027 after six months of employment, and up to eight additional weeks of gender-neutral new parent leave.
  • Unlimited Udemy access, partner discounts, recognition rewards, company events, and location-specific benefits.
  • Free onsite dining in Vienna, Bucharest, Barcelona, and Berlin.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →