GRC Security Analyst: ISO27001 & SOC2 Risk Lead

Appfire; Polska; Remote; PLN 90,000 - 140,000; Full time

Benefits offered by this job

Equity

26 vacation days

Wellbeing days

Volunteer time off

Appfire University

Private healthcare

Life insurance

Home office allowance

Job summary

Appfire is seeking a GRC Security Analyst to manage governance, risk, and compliance across our rapidly growing organization. You will collaborate with business owners and vendors to assess controls, drive remediation, and support audits.

In this role you’ll help ensure ISO 27001, SOC 2, and GDPR adherence, manage vendor risk, and support ongoing security programs while engaging with multiple teams in a fast-paced, remote-friendly environment.

Qualifications

• Bachelor’s degree in CS, Information Security, Engineering or related field.
• 2+ years in information security risk/compliance roles.
• Knowledge of CIS, ISO 27001, SOC 2.
• Experience with cloud security tools (AWS/Azure/GCP).
• Able to thrive in a fast-growing environment.
• Self-starter with initiative.
• Creative problem solving.
• Excellent interpersonal and communication skills.
• CISA, CISSP or similar is a plus.

Responsibilities

• Coordinate security governance goals and initiatives.
• Assist vendor risk assessments and audits.
• Support ISO 27001, SOC2, GDPR compliance.
• Identify policy non-conformities and track corrective actions.
• Monitor information security risks and remediation.
• Track audit findings and risk assessments.
• Assist BC/DR testing oversight.
• Coordinate integration plans for acquisitions.
• Annual policy updates and security awareness campaigns.
• Handle confidential information with discretion.

Skills

GRC governance

Risk assessment

Vendor risk mgmt

ISO 27001

SOC 2

Cloud security

Regulatory compliance

Communication skills

Security audits

Security frameworks

Education

Bachelor’s degree in CS/InfoSec

Tools

AWS

Azure

GCP

Heroku

Job description

Appfire is seeking a GRC Security Analyst to manage governance, risk, and compliance across our rapidly growing organization. You will collaborate with business owners and vendors to assess controls, drive remediation, and support audits.

In this role you’ll help ensure ISO 27001, SOC 2, and GDPR adherence, manage vendor risk, and support ongoing security programs while engaging with multiple teams in a fast-paced, remote-friendly environment.