GRC Security Analyst - Information Security

1 hour, 13 minutes ago
Full-time
Junior
Cybersecurity
Appfire

Appfire

Appfire specializes in providing enterprise collaboration software solutions that enhance workflow and productivity for teams using platforms like Atlassian, Microsoft, and Salesforce, while also offering tools for IT service management and agile work ...

Internet Software & Services
251-1K
$149M raised

Description

  • Coordinate and facilitate security governance goals and initiatives.
  • Support sales teams with customer security questions, assessments, audits, technical controls, and risk mitigation alternatives.
  • Conduct vendor risk assessments and follow up on findings.
  • Support regulatory and compliance initiatives, including ISO 27001, SOC 2, and GDPR.
  • Identify, document, and track policy non-conformities, risks, exceptions, and corrective action plans.
  • Track audit and risk assessment findings through timely resolution.
  • Monitor business continuity and disaster recovery testing.
  • Perform periodic organizational compliance checks and support acquisition integration plans.
  • Review and update information security policies and processes.
  • Support security awareness campaigns and handle sensitive information discreetly.

Requirements

  • Bachelor’s degree in Computer Science, Information Security, Engineering, a related field, or equivalent experience.
  • 2+ years of experience in information security risk or compliance roles.
  • Knowledge of information security frameworks such as CIS, ISO 27001, and SOC 2.
  • Experience with cloud security tools, technologies, and controls, including AWS, Azure, Heroku, or GCP, preferred.
  • Ability to work effectively in a fast-paced, high-growth environment.
  • Self-starter with initiative and the ability to identify issues and recommend actions.
  • Creative problem-solving ability.
  • Excellent interpersonal and communication skills.
  • CISA, CISSP, or similar security/GRC certification preferred.

Benefits

  • Company equity eligibility for all team members.
  • Fully remote role within Bulgaria.
  • 26 paid vacation days annually and 12 paid wellness days.
  • Paid volunteer time, including 24 volunteer hours and 3 CSR volunteering days annually.
  • Appfire University learning and professional development platform.
  • Fully covered private health insurance and Multisport Card in Bulgaria.
  • Monthly food vouchers and a fully paid Sofia public transportation card.
  • One-time net baby bonus upon the birth of a child.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Website Security Support - Remediation Analyst

GoDaddy 5001-10000 Technology, Information and Internet

GoDaddy is hiring a remote Remediation Support Analyst in India to manage website security incidents by identifying, removing, and preventing malware while restoring customer site functionality.

DNS Drupal JavaScript Linux Magento .NET PHP Shell Scripting SQL Server TCP/IP Unix WordPress
4 days, 1 hour ago

IT SOX Admin

CareDx 251-1K Pharmaceuticals

CareDx is seeking an IT compliance and systems documentation professional to strengthen system governance, access controls, audit readiness, and operational integrity in its regulated precision-medicine diagnostics environment.

Active Directory Git NetSuite
4 days, 3 hours ago

Information Systems Security Officer (ISSO), Senior

Lever 251-1K Professional Services

AnaVation is seeking a senior Information Systems Security Officer (ISSO) to lead the Risk Management Framework (RMF) and accreditation of a new digital evidence platform supporting a U.S. Federal Government client, working remotely with occasional travel to Washington, DC.

AWS Azure DevSecOps Penetration Testing
6 days, 3 hours ago

Senior Detection Engineering & Threat Hunting Analyst

Huntress 251-1K Professional Services

Huntress is hiring a remote US Senior Detection Engineering and Threat Hunting Analyst to develop scalable detections and proactively identify stealthy threats across millions of endpoints and identities supporting its 24/7 SOC.

Azure Cybersecurity Git Linux macOS
1 week ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers