Security Compliance Analyst (AI)

Location: Romania; fully remote, available only to candidates based in Romania

Company

hirify.global develops Justride, a mobile ticketing and fare collection platform used by public transport authorities and agencies worldwide, including mobile ticketing, ticket machines, and contactless bank card payments.

What you will do

• Own assigned security control processes end to end, including planning, execution, evidence collection, findings follow-up, and resolution tracking.
• Perform manual and tool-based controls, conduct access reviews, and maintain accurate records of results and actions.
• Run the Third-Party Risk Management process, including supplier assessments, security posture reviews, risk tracking, and reassessments.
• Maintain supplier, risk, asset, and data processing registers.
• Support bids, tenders, customer security questionnaires, audits, and certifications by preparing clear security and privacy responses and evidence.
• Improve and automate control processes, including through low-code tools and AI.

Requirements

• Hands-on experience in information security, IT compliance, internal control, or audit, with ownership of control processes from start to finish.
• Practical audit or assessment experience against at least two of ISO 27001, SOC 2, PCI DSS, GDPR, or NIST, including mapping controls across frameworks.
• Solid understanding of access control, risk management, third-party risk, data protection, cloud services, and SaaS security.
• Detail-oriented, consistent, and able to manage recurring tasks and multiple deadlines.
• Clear writing and strong information-structuring skills for documentation, registers, and questionnaire responses.
• Comfortable taking ownership, asking questions, and learning where needed.

Nice to have

• Third-Party Risk Management or vendor security assessment experience.
• Experience supporting RFPs, tenders, or customer security questionnaires.
• Experience with compliance automation or GRC platforms for control monitoring, evidence collection, or audit management.
• Interest in scripting, low-code tools such as n8n or Make, and AI workflow improvements.
• Experience with Vanta, AWS, Jira, or Confluence.
• ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM, CRISC, CISSP, or Security+ certification.
• Experience in SaaS, payments, public transport, or public sector environments.

Culture & Benefits

• Fully remote work from Romania with autonomy, openness, trust, and a learning-focused environment.
• 25 days of annual holiday plus a three-day Christmas shutdown.
• Premium medical care through Regina Maria, mental health support, and menopause support.
• Monthly allowance for regular social gatherings.
• Up to €1,000 annual training budget, €200 home-office allowance, and a choice of workstation.
• Applications are welcomed from underrepresented groups, including disabled and neurodivergent people, with adjustments available during the process.