Junior GRC Security Engineer: RFP & Compliance

Hoxhunt; Helsinki; Hybrid; EUR 33,000 - 45,000; Full time

Benefits offered by this job

Extensive healthcare

Beautiful Helsinki office

Gym and swimming pool

Job summary

Hoxhunt is hiring a Junior Security Engineer, GRC to join the Product Security team. You will own security questionnaires and RFP responses, coordinate evidence across SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA, and drive vulnerability management with engineers.

You will partner with Sales, Product, and external teams in a fast-growing SaaS environment, leveraging AI tools to scale compliance while actively learning. Helsinki office visits required on hybrid schedule.

Qualifications

• Customer-facing security work (RFPs and questionnaires).
• Excellent written English with high attention to detail.
• Organizational and project-management skills to lead RFP execution.
• Familiarity with security frameworks (SOC 2, ISO 27001, HIPAA) or willingness to learn.

Responsibilities

• Quarterback RFP and security questionnaire responses, triage requests, draft high-quality responses, coordinate input from experts, and drive submission.
• Own evidence flow across SOC 2 Type II, ISO 27001, ISO 42001 and HIPAA; validate evidence and automate where possible.
• Run vulnerability management cadence: review dashboards, route findings, track remediation against SLAs, report status.
• Coordinate recurring security activities: pen tests, access reviews, policy reviews, and subprocessor reviews.
• Maintain security knowledge base and external security documentation for sales.

Skills

GRC

RFP coordination

English writing

Education

Bachelor’s or Master’s in InfoSec/IT/Business

Tools

Vanta

Drata

Loopio

Hyperproof

Job description

Hoxhunt is hiring a Junior Security Engineer, GRC to join the Product Security team. You will own security questionnaires and RFP responses, coordinate evidence across SOC 2 Type II, ISO 27001, ISO 42001, and HIPAA, and drive vulnerability management with engineers.

You will partner with Sales, Product, and external teams in a fast-growing SaaS environment, leveraging AI tools to scale compliance while actively learning. Helsinki office visits required on hybrid schedule.