Senior GRC Analyst (Cybersecurity)

Location: Hybrid in-office in Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX; up to three days per week in the office and remotely the remaining days. U.S. citizenship is required.

Company

hirify.global develops cybersecurity and hybrid identity protection solutions for security-conscious enterprises, regulated industries, and government customers.

What you will do

• Coordinate SOC 2 Type II, ISO 27001, and HIPAA audit preparation, scheduling, evidence collection, fieldwork, and reporting.
• Support FedRAMP and other compliance frameworks through control research, evidence gathering, deliverable review, and documentation.
• Own customer, partner, and prospect security questionnaires, due diligence requests, and the reusable answer library.
• Drive remediation timelines for audit findings, track milestones, escalate high-risk blockers, and influence control owners without formal authority.
• Maintain information security policies, standards, and procedures aligned with NIST, ISO 27001, HIPAA, and SOC 2.
• Back up vendor risk, risk exception, Trust Center, KPI/KRI, cyber risk register, security awareness, and GRC automation activities.

Requirements

• 5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.
• A degree in Cybersecurity, or CISSP, CRISC, CISM, or CISA certification.
• Experience with SOC 2 Type II and ISO 27001 audits and attestations.
• Clear written and verbal communication, including the ability to explain technical control details to engineers, business owners, and customers.
• A track record of achieving results through influence with engineers and stakeholders who do not report to you.
• U.S. citizenship required.

Nice to have

• Hands-on experience in at least four areas including security policies and standards, GRC operations, vendor risk, cyber and technology risk, risk registers, customer trust, audits, or security assurance.
• Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.
• Hands-on configuration of Vanta, Drata, OneTrust, Archer, ServiceNow, or another modern GRC platform.
• Experience automating control monitoring and evidence collection, answering customer questionnaires at scale with AI-assisted tools, or applying compliance as code.
• GRC experience in cybersecurity, identity, or infrastructure software serving regulated industries.
• Familiarity with ISO 42001, NIST AI RMF, M&A due diligence, IPO readiness, quantitative cyber risk analysis, business continuity, incident response, or continuous monitoring plans.

Culture & Benefits

• Hybrid work model with up to three office days per week and remote work on the remaining days.
• Purpose-driven workplace focused on growth, balance, curiosity, integrity, initiative, and work-life balance.
• Global cybersecurity team and employee experience recognized through workplace and growth awards.
• AI and GRC tooling, including Vanta, supports efficient work and process automation.