Cybersecurity GRC - Compliance Analyst

Location: Ukraine - Remote

Company

hirify.global develops products and services connecting the physical and digital worlds through positioning, modeling, connectivity, data analytics, software, hardware, and services.

What you will do

• Perform ISO 27001, ISO 27701, SOC 2, and NIST 800-171 gap analyses and recommend process, documentation, procedural, and tooling improvements.
• Design and improve audit controls and the hirify.global Common Control Framework to increase compliance and certification efficiency.
• Conduct ISO 27001 and ISO 27701 internal audits, as well as SOC 2 and NIST 800-171 internal and external audits.
• Maintain policies and the Integrated Management System, coordinate with business stakeholders and external auditors, and support corrective action plans.
• Present risk, audit, trend, and compliance metrics to senior leadership and help manage business risk posture.
• Collaborate with cybersecurity, IT, GRC, software development, leadership, legal, HR, and divisional teams across geographies.

Requirements

• Working knowledge of ISO 27001, ISO 27701, SOC 2, and NIST 800-171, including audit control design.
• At least 2 years of experience with these security frameworks and at least 2 years in risk management, information security, or systems engineering/administration within a large international software company.
• ISO 27001 Certified Internal or Lead Auditor certification, or equivalent experience.
• Proficiency in English, written and oral, is essential.
• Knowledge of risk management standards, data privacy regulations including GDPR and CCPA, and general IT concepts such as networking, cloud computing, and software development.
• Experience writing policies, interpreting complex business changes, collecting information from disparate sources, and producing reports for varied audiences.
• Hands-on experience with GRC tools such as Jira Service Desk.
• Intermediate experience with Windows and Linux/Unix, cloud platforms including AWS, Azure, and GCP, scripting, and Splunk query creation.
• Strong analytical, problem-solving, decision-making, organization, presentation, communication, and time-management skills, with the ability to work independently and collaboratively under changing priorities.

Nice to have

• A relevant degree in Data Science, Computer Science, or Software/Electrical Engineering.
• Current security certifications such as SEC+ or GSEC.
• Experience using AI to reduce manual processes and procedures.

Culture & Benefits

• Remote, full-time work based in Ukraine.
• The role alternates between six months of project-based work and six months of audit work.
• Work within a diverse, collaborative, and international cybersecurity team.
• hirify.global’s stated values are Belong, Grow, and Innovate.

Hiring process

• Submit an online application through one of the Apply buttons in the posting.