Back
Company hidden
2 months ago

Information Security Analyst (GRC)

Work format
onsite
Work type
fulltime
Grade
junior
English
b2
Country
Croatia
This vacancy is from Hirify.Global listVacancy from Hirify Global, list of international tech companies
Plus is required to make matches and apply

Match & Cover letter

Plus required for matching with this vacancy

Job description

Text:
/
TL;DR
Information Security Analyst (GRC): Managing governance, risk, and compliance programs with an accent on ISO 27001 and SOC 2 frameworks. Focus on evidence collection, control monitoring, and identifying AI-related security risks.

Location: Croatia

Company

hirify.global is a leading provider of European B2B data and sales intelligence, helping businesses discover and engage with qualified decision-makers.

What you will do

  • Operate ISO 27001 and SOC 2 frameworks, including evidence collection and control tracking.
  • Maintain and improve security documentation, policies, procedures, and risk registers.
  • Support internal and external audits, questionnaires, and vendor risk assessments.
  • Partner with Engineering and IT Operations to track and close remediation gaps.
  • Identify and implement process improvements for efficiency and automation.
  • Monitor emerging risks, specifically focusing on AI security intersections.

Requirements

  • 1-2 years of experience in security, GRC, IT audit, or risk functions.
  • Working knowledge of ISO 27001 and/or SOC 2 fundamentals.
  • Ability to explain risk and compliance concepts to both technical and non-technical audiences.
  • Detail-oriented and process-driven approach to documentation and monitoring.
  • Strong written and verbal communication skills.
  • Must be based in Croatia

Nice to have

  • Working knowledge of AI security and risk.

Culture & Benefits

  • Inclusive community that supports, challenges, and inspires diverse talent.
  • Impact-driven culture where individual contributions are celebrated.
  • Value-based environment focusing on ownership of outcomes and customer understanding.

Be careful: if the employer asks you to log into their system using iCloud/Google, send codes/passwords, or run code/software, don't do it - these are scammers. Always click "Report" or contact support. More in guide →