Назад
Company hidden
7 дней назад

Information Security Analyst (GRC)

Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
Croatia
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Information Security Analyst (GRC): Managing governance, risk, and compliance programs with an accent on ISO 27001 and SOC 2 frameworks. Focus on evidence collection, control monitoring, and identifying AI-related security risks.

Location: Croatia

Company

hirify.global is a leading provider of European B2B data and sales intelligence, helping businesses discover and engage with qualified decision-makers.

What you will do

  • Operate ISO 27001 and SOC 2 frameworks, including evidence collection and control tracking.
  • Maintain and improve security documentation, policies, procedures, and risk registers.
  • Support internal and external audits, questionnaires, and vendor risk assessments.
  • Partner with Engineering and IT Operations to track and close remediation gaps.
  • Identify and implement process improvements for efficiency and automation.
  • Monitor emerging risks, specifically focusing on AI security intersections.

Requirements

  • 1-2 years of experience in security, GRC, IT audit, or risk functions.
  • Working knowledge of ISO 27001 and/or SOC 2 fundamentals.
  • Ability to explain risk and compliance concepts to both technical and non-technical audiences.
  • Detail-oriented and process-driven approach to documentation and monitoring.
  • Strong written and verbal communication skills.
  • Must be based in Croatia

Nice to have

  • Working knowledge of AI security and risk.

Culture & Benefits

  • Inclusive community that supports, challenges, and inspires diverse talent.
  • Impact-driven culture where individual contributions are celebrated.
  • Value-based environment focusing on ownership of outcomes and customer understanding.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →