Senior Risk Specialist (Security GRC Specialist)

Location: Seoul, South Korea

Company

hirify.global is a large global public commerce company building high-tech shopping, eating, and living services with a startup culture.

What you will do

• Support compliance operations for domestic and international frameworks, including the Network Act, PIPA, ISO/IEC 27001, and NIST CSF.
• Prepare for and support internal and external audits by collecting evidence, coordinating stakeholder interviews, and validating compliance artifacts.
• Monitor regulatory and industry requirements, identify control gaps, and drive alignment.
• Conduct technical risk assessments covering infrastructure, production services, third-party vendors, and new technology initiatives.
• Maintain the enterprise Security Risk Register, track findings, risk acceptance, and remediation timelines, and drive remediation with Security Engineering, IT, and platform teams.
• Update cybersecurity policies and governance repositories and produce executive-level GRC metrics and dashboards.

Requirements

• 6+ years of hands-on experience in Cybersecurity GRC, Information Security, IT Risk Management, or IT Audit.
• Direct experience executing Korean regulatory and certification compliance operations alongside global standards.
• Experience conducting technical risk assessments, managing enterprise risk registers, and driving remediation workflows across cross-functional teams.
• Strong organizational, analytical, and evidence-management skills with high attention to detail.
• Bachelor’s degree in Computer Science, Information Security, Information Systems, or equivalent practical experience.

Nice to have

• Native or bilingual Korean proficiency with professional working proficiency in English.
• Experience in high-scale cloud environments or fast-paced e-commerce platforms.
• Hands-on proficiency with enterprise GRC tools, ticketing workflows, and data visualization or dashboarding tools.

Culture & Benefits

• Full-time regular position with a 12-week probation period; the probation may be skipped, shortened, or extended for business reasons.
• The posting also describes the role as a contract position with the same probation terms.
• Work includes collaboration across AI GRC, Control Assurance, Security Architecture, Engineering, Legal, Privacy, IT, and platform teams.

Hiring process

• Application review, phone interview, onsite or virtual onsite interview, and offer.
• The process may vary by role or scheduling circumstances; interview schedules and results are sent to the email address provided in the application.
• Hiring may be restricted when legal qualifications required for hiring or work performance are not met.