Information Security GRC Specialist - Customer Trust

HireRight; Katowice; Hybrid; PLN 110,000 - 170,000; Full time

Benefits offered by this job

Private Medical Care

Edenred card

Lunch Vouchers

Paid Lunch Break (30 Minutes)

Social Fund (Holiday Allowance, Glasss

Glassess Voucher

Bonus Plans

Group Life Insurance

Career Path & Opportunities to Grow

Professional Training

Job summary

HireRight in Katowice is seeking a GRC Customer Trust Specialist to support our Customer Trust program, manage information security compliance, risk management, third-party assurance activities, and governance processes that support customer-facing security commitments.

You will liaise between Information Security, customers, and external partners, coordinating assessments, responding to due diligence requests, and maintaining documentation that demonstrates the organization's security posture.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity, business, or a related field.
• 3–5 years of experience in information security, GRC, or customer trust roles, including customer security questionnaires, audits, assessments, and customer-facing security programs.
• Working knowledge of information security and privacy frameworks such as ISO 27001, SOC 2, GDPR, FCRA, or similar standards.
• Experience supporting third-party assurance activities; familiarity with Conveyor, CAIQ, HECVAT, SIG, or similar is a plus.
• Experience managing customer trust portals and knowledge repositories is preferred.
• Certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are preferred.
• Strong project management and organizational skills; Jira experience is a plus.
• Familiarity with core IT infrastructure, cloud technologies, and information security concepts.
• Excellent customer service, relationship management, written, and verbal communication skills.
• English proficiency required for frequent customer-facing interactions.

Responsibilities

• Lead customer-facing security activities, including security questionnaires, risk assessments, audits, project security reviews, and remediation tracking.
• Coordinate responses to customer requests for security, compliance, and privacy information with evidence of the organization's security posture.
• Serve as the primary liaison for customer trust engagements, following established procedures for assessments, audits, and due diligence requests.
• Evaluate customer security requests, identify improvement opportunities, and communicate recommendations to management and stakeholders.
• Collaborate with business units and cross-functional teams to meet customer requirements and ensure timely completion of deliverables.
• Review corrective action plans and advise on remediation strategies for compliance gaps, audit findings, and vulnerabilities.
• Enhance customer trust processes, documentation, and knowledge resources.
• Perform additional compliance, governance, and risk-related duties as assigned.

Skills

Customer service

Project management

Communication

Analytical skills

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field

Tools

Jira

Job description

About HireRight

HireRight is the premier global background screening and workforce solutions provider. We bring clarity and confidence to vetting and hiring decisions through integrated, tailored solutions, driving a higher standard of accuracy in everything we do. Combining in-house talent, personalized services, and proprietary technology, we ensure the best candidate experience possible. PBSA accredited and based in Nashville, TN, we offer expertise from our regional centers across 200 countries and territories in The Americas, Europe, Asia, and the Middle East. Our commitment to get it right every time, everywhere, makes us the trusted partner of businesses and organizations worldwide.

Overview

This role reports to the Sr. Manager of Information Security GRC and is responsible for supporting the organization's Customer Trust program. The GRC Customer Trust Specialist helps manage information security compliance, risk management, third-party assurance activities, and governance processes that support customer-facing security and compliance commitments.

This position serves as a key liaison between Information Security, internal stakeholders, customers, and external partners by facilitating security assessments, responding to customer due diligence requests, coordinating audits, and maintaining documentation that demonstrates the organization's security posture. The role also assists with compliance monitoring, risk identification, remediation tracking, and process improvement initiatives to ensure continued alignment with internal policies, regulatory requirements, and industry standards.

Model of work: Hybrid (Katowice office)

Responsibilities

• Lead customer-facing security activities, including security questionnaires, risk assessments, audits, project security reviews, and remediation tracking.
• Respond to customer requests for security, compliance, and privacy information by coordinating evidence collection and communicating the organization's security posture.
• Serve as the primary liaison for customer trust engagements, leveraging established procedures to manage assessments, audits, and due diligence requests.
• Evaluate customer security requests, identify opportunities for improvement, and communicate recommendations to management and key stakeholders.
• Partner with business units and cross-functional teams to support customer requirements and ensure timely completion of security and compliance deliverables.
• Review corrective action plans and advise stakeholders on remediation strategies for compliance gaps, audit findings, and identified vulnerabilities.
• Continuously enhance customer trust processes, documentation, and knowledge resources.
• Perform additional compliance, governance, and risk-related duties as assigned.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field.
• 3-5 years of experience supporting Information Security, GRC, or Customer Trust functions, including customer security questionnaires, audits, assessments, and customer-facing security programs.
• Working knowledge of information security and privacy frameworks such as ISO 27001, SOC 2, GDPR, FCRA, or similar regulatory and compliance standards.
• Experience supporting third-party assurance activities; familiarity with Conveyor, CAIQ, HECVAT, SIG, or similar assessment frameworks is a plus.
• Experience managing customer trust portals and security knowledge repositories is preferred.
• Relevant certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are preferred.
• Strong project management and organizational skills; Jira experience is a plus.
• Familiarity with core IT infrastructure, cloud technologies, and information security concepts.
• Excellent customer service, relationship management, written, and verbal communication skills.
• Self-motivated professional with strong analytical abilities, attention to detail, and the ability to work independently while collaborating effectively across teams.
• English proficiency required, as the role involves frequent customer-facing interactions and communications.

What do we offer

HireRight offers its employees a permanent contract and a comprehensive package of benefits. From day one you will receive a training plan to get you on board quickly. Additionally, we offer:

• Private Medical Care
• Edenred card
• Lunch Vouchers
• Paid Lunch Break (30 Minutes)
• Social Fund (Holiday Allowance, Glasses Voucher)
• Bonus Plans
• Group Life Insurance
• Career Path & Opportunities to Grow
• Professional Training

All resumes are held in confidence. Only candidates whose profiles closely match requirements will be contacted during this search.HireRight does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of HireRight and HireRight will not be obligated to pay a placement fee.