GRC Analyst (U.S. Time Zone Support)

TL;DR

GRC Analyst (U.S. Time Zone Support): Supporting governance, risk, and compliance execution for security and regulatory programs with an accent on ISO 27001, SOC 2, HIPAA, PCI DSS, GDPR, and audit readiness. Focus on coordinating evidence and documentation, running compliance reviews and risk assessments, and reporting GRC metrics while aligning operations with U.S. Central/Eastern time zones.

Company

hirify.global delivers an agentic digital experience platform for personalized, predictive customer engagement.

What you will do

• Implement and maintain compliance programs and security controls aligned with ISO 27001, SOC 2, HIPAA, PCI DSS, GDPR, TISAX, NIST, and IRAP.
• Update security policies, procedures, and controls; perform compliance reviews and define remediation actions.
• Coordinate audit support activities, including evidence collection, documentation preparation, audit calendars, and deliverable tracking.
• Support periodic risk assessments and maintain the risk and findings register with ongoing monitoring.
• Collaborate with Engineering, Product, Legal, Procurement, and Enterprise Technology to complete compliance action items.
• Prepare and deliver GRC status reports, dashboards, and metrics; keep compliance documentation centrally stored (e.g., SharePoint, Confluence).

Requirements

• Location: Kuala Lumpur, Malaysia
• Time zone support: U.S. Central or Eastern Time Zone (work hours 12:00PM–8:00PM local time)
• Bachelor’s degree in information technology, cybersecurity, or a related field.
• Familiarity with compliance and security frameworks such as ISO 27001, SOC 2, HIPAA, GDPR, PCI DSS, and NIST.
• 3–5 years of experience in a GRC, risk management, audit support, or compliance role in a technology-driven environment.
• Strong attention to detail and organizational skills; ability to manage multiple tasks.

Culture & Benefits

• Hands-on GRC role working closely with the GRC Manager and the CISO.
• Collaboration across multiple functions and global stakeholders.
• Use of Microsoft 365 and collaboration platforms to support documentation and reporting.
• Equal opportunity workplace.