Information Security Analyst - GRC (AI)

Location: Lisbon, Portugal; hybrid model with office attendance three times per week

Company

hirify.global provides ethically sourced data, an AI marketplace, and end-to-end services for AI and machine learning model training, with offices in Seattle and Lisbon.

What you will do

• Support information security governance, risk, compliance, and strategic cybersecurity initiatives.
• Participate in internal and external audits, evidence collection, client security inquiries, and assessments with IT, Architecture, DevOps, Sales, and Customer Support.
• Identify applicable standards, controls, compliance frameworks, legislation, organizational gaps, and improvement opportunities.
• Develop and implement security and privacy policies, standards, guidelines, and procedures within the Integrated Management System.
• Maintain and continuously improve ISO 27001, ISO 27701, and ISO 42001 certifications, as well as Risk Management, Incident Response, and Business Continuity frameworks.
• Support security awareness and personnel training to develop an organization-wide information security culture.

Requirements

• 3–5 years of demonstrable information security experience in a technology organization, security consulting firm, or services provider with equivalent responsibilities.
• Academic education in Computer Engineering or a similar field, preferably from a recognized university.
• Experience performing information security assessments for internal systems and client inquiries connected to sales engagements or ongoing business relationships.
• Knowledge of ISO 27001/27002, ISO 17799, NIST 800-53, NIST CSF, CIS Controls, and SOC 2.
• Experience developing, maintaining, and enforcing an Information Security and Privacy Management System under ISO 27001/27002 and ISO 27701.
• Knowledge of ISO/IEC 22301, NIST Cybersecurity Framework 2.0, and related management systems and frameworks; familiarity with ISO 42001 AI Governance standards.
• Familiarity with GDPR, CCPA, HIPAA, LGPD, and SOX compliance requirements.
• Basic knowledge of cloud-native architectures, cloud services, IaaS/PaaS/SaaS, containers, microservices, DevOps toolchains, and multi-tenancy.
• Good verbal and written communication, ability to work in an Agile and dynamic environment, high autonomy, professionalism, responsibility, and integrity. Fluent English is required.

Nice to have

• Professional certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or similar.

Culture & Benefits

• Flexible working schedule and hybrid work from the office or home.
• Career development opportunities with a defined career path and supervisor support.
• Feedback and continuous improvement culture in a fast-paced AI environment.
• International and diverse team representing more than 23 nationalities, with language classes.
• Continuous training through workshops, unlimited Coursera access, and formal development opportunities.
• Daily breakfast and lunch, weekly happy hours, extra time off, and in-office massages.