GRC Specialist (Cybersecurity)

TL;DR

GRC Specialist (Cybersecurity): Owning and leading security compliance programs across SOC 2, ISO 27001, and ISO 42001 with an accent on automating evidence gathering and risk signal aggregation using AI. Focus on replacing point-in-time snapshots with real-time assurance and building AI-assisted GRC workflows.

Location: Tel Aviv

Company

hirify.global is an AI-native autonomous SecOps platform specializing in security automation for Fortune 500 companies.

What you will do

• Lead and maintain security compliance programs including SOC 2, ISO 27001, C5 BSI, and ISO 42001.
• Design and operate continuous compliance monitoring programs leveraging AI to replace manual snapshots.
• Manage the Third-Party Risk Management (TPRM) program, vendor assessments, and the organizational risk register.
• Develop security policies, standards, and procedures aligned with compliance and business objectives.
• Collaborate with the CISO, HR, Legal, and AI Transformation leads on security governance.
• Drive security awareness training and champion secure development practices.

Requirements

• 2+ years of hands-on experience in information security and GRC, ideally in a fast-moving SaaS environment.
• Deep familiarity with SOC 2, ISO 27001, NIST, CIS, DORA, and GDPR frameworks.
• Practical experience with cloud environments (AWS, Azure, or GCP) and infrastructure security.
• Working knowledge of AI tools, LLMs, and automation — must have practical usage experience.
• Ability to translate technical risks into clear language for executives and auditors.
• Experience with SOC environments and cybersecurity incident response.

Culture & Benefits

• High-growth, fast-paced environment backed by Series D funding.
• Recognized as one of Forbes' Best Startup Employers in America.
• Collaborative culture of "go-getters" pushing the boundaries of security automation.
• Encouragement to use AI tools for professional research and preparation.