Information Security Governance Specialist (SaaS)

TL;DR

Information Security Governance Specialist (SaaS): Driving the maturity of security governance programs with an accent on automation and AI integration. Focus on managing compliance frameworks like ISO 27001 and SOC 2, streamlining audit readiness, and scaling vendor risk management processes.

Location: Must be able to work in a hybrid format with weekly attendance at the St. Gallen office.

Company

hirify.global is a brand management platform that helps leading brands build trust through effective and measurable security governance.

What you will do

• Manage customer security assurance, including security questionnaires and audit inquiries.
• Drive compliance programs such as ISO 27001, SOC 2, and TISAX.
• Act as the subject matter expert during audits to ensure control effectiveness.
• Implement automation and AI within the Vanta-based GRC program to enable continuous evidence collection.
• Design AI-enabled workflows using LLMs for policy management and risk assessments.
• Scale vendor risk management through automated security assessments.

Requirements

• 5+ years of experience in information security governance, GRC, or technology risk within a SaaS environment.
• Proven experience as a subject matter expert in SOC 2 and/or ISO 27001 audits.
• Hands-on experience with modern GRC platforms like Vanta or Conveyor.
• Fluent English proficiency.
• Ability to work in a hybrid format with weekly presence in St. Gallen.

Nice to have

• Experience with TISAX or Microsoft SSPA frameworks.
• Relevant certifications such as CISA, CISM, CISSP, or CIPP.
• German language skills.