Security Governance Associate (Cybersecurity)

TL;DR

Security Governance Associate (Cybersecurity): Managing security certifications, compliance frameworks, and risk assessments for a global SaaS platform with an accent on ISO 27001 and SOC 2 maintenance. Focus on integrating acquired companies into security policies, conducting third-party risk management, and ensuring internal controls alignment.

Location: On-site in Paris (France) or Barcelona (Spain)

Company

hirify.global provides a SaaS service committed to the highest security levels, holding various ISO certifications and utilizing advanced security initiatives.

What you will do

• Maintain ISO 27001, 27701, 27017, 27018 certifications, HIPAA, and SOC 2 reports.
• Integrate acquired companies with internal security policies and practices.
• Conduct internal, external, and customer security audits and periodic risk assessments.
• Manage security governance tasks, including KPIs, risk analysis, and security awareness campaigns.
• Collaborate with other departments to optimize business processes like onboarding, access management, and SDLC.
• Perform security assessments and risk analyses for vendors as part of Third-Party Risk Management (TPRM).

Requirements

• Bachelor's or Master's degree in Information Systems Management or a related field.
• Professional experience in Cybersecurity or Security GRC.
• Knowledge of ISO 27001, SOC 1, and SOC 2 frameworks.
• Strong project management skills and a proactive mindset.
• Fluent English proficiency.
• Must be located in Paris or Barcelona.

Nice to have

• Knowledge of French language.
• Interest in AI technologies and AI security.

Culture & Benefits

• Work in a fast-paced scale-up environment.
• Opportunity to take ownership of high-impact projects.
• Part of a global trust team overseeing diverse products and teams.
• Equal opportunity employer committed to diversity and inclusion.