Назад
Company hidden
2 дня назад

Senior GRC Analyst (SaaS)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Portugal
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Senior GRC Analyst (SaaS): Leading privacy operations and security governance within the GRC team with an accent on GDPR compliance, risk assessments, and audit support. Focus on operationalizing privacy-by-design, managing third-party risk reviews, and collaborating across legal and engineering teams to ensure global regulatory alignment.

Location: Hybrid, Lisbon, Portugal

Company

hirify.global is a leading AI-powered customer engagement platform that enables brands to deliver personalized cross-channel experiences at scale.

What you will do

  • Lead privacy operations, including managing Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
  • Maintain privacy program documentation such as Records of Processing Activities (ROPA) and manage Data Subject Access Requests (DSARs).
  • Conduct privacy and compliance risk assessments aligned with GDPR, CCPA/CPRA, and HIPAA requirements.
  • Support rotational GRC responsibilities including third-party risk management and audit support for SOC 2 and ISO 27001.
  • Collaborate with Legal, Product, and Engineering teams to embed privacy-by-design and automation into workflows.
  • Assist in customer trust inquiries by partnering with Sales and Customer Success teams on privacy questionnaires.

Requirements

  • Proven experience with GDPR and global privacy operations in a SaaS environment.
  • Hands-on experience conducting PIAs, DPIAs, ROPAs, and DSAR management.
  • Experience in third-party risk management and security review processes.
  • Familiarity with audit frameworks such as SOC 2, ISO 27001, and ISO 27701.
  • Ability to translate complex privacy and security risks into clear, actionable recommendations for cross-functional stakeholders.
  • Strong organizational skills with the ability to manage multiple priorities and deadlines.

Nice to have

  • Privacy certifications such as CIPP/E, CIPP/US, or CIPM.
  • Experience with US state privacy laws including HIPAA and CCPA.

Culture & Benefits

  • Competitive salary and meaningful equity.
  • Private Medical Insurance and Life/Risk Assurance.
  • Meal allowance and paid annual leave.
  • Global Lifestyle Reimbursement Account.
  • Commitment to diversity, inclusion, and a healthy, collaborative work culture.
  • Complete laptop workstation and remote-friendly flexibility.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →