TL;DR
Senior ITSM Compliance Specialist: Ensuring transparency and reliability of IT processes, conducting internal/external audits, assessing risks, and implementing control measures with an accent on ITGC framework development, risk management, and compliance with ISO, SOC 2, and SOX-ITGC standards. Focus on process automation, analytical reporting, and fostering a culture of compliance.
Location: Hybrid - Cyprus, Kazakhstan. Relocation package offered.
Company
hirify.global is a product company seeking to ensure IT process transparency and reliability.
What you will do
- Ensure IT processes comply with corporate policies, best practices, and IT frameworks.
- Perform regular and ad-hoc IT internal control audits, including design and operating effectiveness.
- Assess the current state of IT controls and develop remediation plans.
- Support external IT audits: preparing teams, responding to auditor requests, collecting evidence.
- Monitor and analyze ITSM metrics (SLA/SLI/SLO, incident trends, problem backlog, change success rate, CMDB data quality).
- Drive improvements based on audit results and improve the compliance culture through workshops, training, and consultations.
- Collaborate with Engineering, SRE, Security, Compliance, Legal, Finance, and other stakeholders.
- Develop and implement DRP as part of corporate Business Continuity Plans (BCP).
Requirements
- 5+ years of experience in ITSM, Service Management, IT Governance, or IT Audit.
- Strong knowledge of ITIL v3/v4 and hands-on experience with Incident, Problem, Change, Request, CMDB.
- Experience preparing for or supporting ISO 20000, ISO 27001, SOC 2, or SOX-ITGC audits.
- Technical understanding sufficient to validate engineering solutions against ITGC and compliance requirements.
- Experience with ITSM platforms and GRC tools (Jira Service Management, Jira, Vanta).
- Strong analytical and reporting skills with PowerBI, Grafana, or Tableau.
- Ability to formalize processes and write standards, procedures, and methodologies.
Nice to have
- ITIL v4 MP, ISO 20000, COBIT-2019 certifications.
- Experience automating compliance checks and IT control testing skills.
- Cloud experience (AWS/GCP/Azure).
- Understanding of DevOps/SRE practices.
- CISA/CISM certifications.
Culture & Benefits
- Stable salary, official employment.
- Health insurance.
- Hybrid work mode and flexible schedule.
- Access to professional counseling services including psychological, financial, and legal support.
- Discount club membership.
- Diverse internal training programs and partially or fully paid additional training courses.
- All necessary work equipment.
Будьте осторожны: если вас просят войти в iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →