Principal Security Compliance Analyst

Hyland; Warszawa; Remote; PLN 337,000 - 350,000; Full time

Benefits offered by this job

Fully remote work

Flexible working hours

Private healthcare

Life insurance

Employee development program

Wellness sessions

Job summary

Hyland is seeking a Principal Security Compliance GRC Analyst to design, implement, and maintain an ISO governance and IMS program across multiple regions and product lines. This role serves as the lead SME for ISO standards, driving audit readiness and scalable certification initiatives.

You will mentor compliance specialists, translate complex controls into actionable processes, and collaborate with product, engineering, legal, and HR to embed security and privacy by design into operations

Qualifications

• Experience leading ISO certification programs and audit readiness.
• Ability to translate security controls into business processes and metrics.
• Proven capability to mentor and develop a compliance team.
• Hands-on experience with ISO/IEC 27001, 27002, 27017, 27018 and 27701.

Responsibilities

• Design, implement, and maintain an ISO governance program across multiple regions and product lines.
• Lead certification and surveillance audits with internal teams and external auditors.
• Expand ISO scope to advanced certifications like TISAX and C5 across the organization.
• Embed governance controls into business processes, not just documentation.
• Develop metrics, dashboards, and reports on ISO program health and readiness.
• Provide leadership and mentoring to compliance specialists across functions.

Skills

ISO governance

Audit leadership

Data analysis

Stakeholder communication

Cloud security

Education

CISSP

CISA

CCAK

ISO 27001 LA

ISO 27001 LI

Tools

Excel

SQL

Job description

Overview

Location: Poland | Remote

The Principal Security Compliance GRC Analyst is responsible for designing, implementing, and maintaining a comprehensive International Organization for Standardization (ISO) governance and certification program. This role serves as the organization's lead subject matter expert for ISO standards and Integrated Management System (IMS) practices, establishing a scalable framework that supports multiple certifications, business units, products, and geographic regions. This role drives continual improvement, governance maturity, audit readiness, and strategic expansion of the ISO program while ensuring alignment with business objectives, customer expectations, and regulatory requirements.

Your Role Responsibilities — Here's What You'll Do

• Develop and own a strategic vision, roadmap, and maturity model for Hyland's enterprise ISO governance and certification program, architecting governance controls that support an Integrated Management System (IMS) spanning multiple certifications, product lines, and business units at enterprise scale.
• Lead certification and surveillance audit activities, including audit planning, evidence management, corrective action tracking, and certification maintenance, while partnering with external auditors and assessors to manage audit schedules, findings, and corrective action plans.
• Drive the expansion of ISO scope and advanced certifications such as TISAX and C5, identifying requirements, building organizational capability, and coordinating implementation across teams.
• Establish governance models and control ownership across teams, translating ISO requirements into actionable control implementations that are embedded in business processes rather than existing as documentation-only artifacts.
• Establish metrics, dashboards, and reporting for ISO program health, including IMS objectives, control effectiveness, evidence completeness, and audit readiness, advising leadership on compliance implications of strategic decisions.
• Provide leadership and mentorship to compliance specialists, collaborating with product, engineering, legal, and HR teams to integrate ISO requirements into business operations and ensure compliance is built into processes.

Role Essentials

• 8+ years of progressive experience in information security compliance, including at least 5 years as a primary owner or lead of ISO certification programs.
• Deep hands-on expertise in ISO/IEC 27001, 27002,27017, 27018 and 27701 (privacy), with demonstrated experience implementing controls across multiple product lines and business units.
• Direct experience with ISO 42001 (AI governance) implementation or equivalent AI security governance frameworks.
• Proven track record of building and scaling compliance programs, with experience mentoring and developing compliance teams.
• Strong understanding of SaaS, cloud infrastructure, and product security models, with excellent data analysis skills using tools such as Excel, SQL, or statistical software packages.

What We'd Like to See

• Certifications such as CISSP, CISA, CCAK, ISO 27001 LA, LI, IA, or equivalent, and experience with TISAX and C5 certifications.
• Exceptional ability to translate technical security controls into business language, build stakeholder alignment, and influence, motivate, and mobilize team members and business partners.
• Excellent critical thinking, analytical, and problem-solving skills, with the ability to use original thinking to translate goals into innovative ideas and design solutions.
• Excellent oral and written communication skills with executive presence, and the ability to develop and deliver engaging, informative, and compelling presentations.
• Excellent organizational, facilitation, and project management skills, with the ability to thrive in a fast-paced, deadline-driven environment while handling sensitive information with discretion and tact.

Pay Transparency

336,875 – 350,163 PLN gross annually based on contract of employment (umowa o pracę)The posted pay rangerepresentsthe company’s good faith estimate for this role. Actualcompensation may differ based on relevant experience, skills, education, and work

Benefits

Flexibility & well‑being

• Fully remote work
• Flexible working hours
• 5 additional days off per year
• Employee Appreciation Day
• Floating holiday
• Volunteer Time Off – 24h/year
• Private healthcare
• Life insurance
• Employee Assistance Program
• Online wellness sessions
• Learning Management System
• Tuition Assistance
• Employee Development Program
• Multisport / Lifestyle Spending Account
• Eyeglasses reimbursement
• Birthday gift card
• Baby gift
• Recognition programs
• PPK & PPE pension schemes

About Hyland

Hyland is the pioneer of the Content Innovation Cloud™, delivering ubiquitous enterprise intelligence to organizations with solutions that unlock actionable insights and drive automation. © Hyland. All rights reserved.

Trusted by thousands of organizations worldwide, including many of the Fortune 100, Hyland's solutions create the foundation for a connected, agentic enterprise, where teams harness the power of AI to redefine how they operate and engage with those they serve. For additional information on Hyland's platform and services, please visit Hyland.com.

#HylandLife

Since 1991, it has been Hyland's mission to help our employees, customers and partners exceed their potential with our industry-leading content services platform. Our employees exude a contagious energy and are passionate about what they do – whether it's helping customers succeed, raising up their fellow Hylanders, or engaging in the communities where they live and work.

The #HylandLife hashtag encompasses our employee-centric culture. Our employees live our culture day in and day out by bringing their best self to work. Hyland supports them to do just that through career development resources, wellbeing programs and innovation practices. We thrive on diverse viewpoints and new ideas and believe that a positive, inclusive workplace is imperative to sustainable success.

As we've grown to a company of nearly 4,000 strong, we have the opportunity to make a significant impact on our communities. We strongly support employee initiatives and align our giving campaigns and programs to organizations that are important to them.

Equal Opportunity Statement

Hyland is an equal opportunity employer. We value diversity and are committed to providing an inclusive workplace for all employees and applicants. Employment decisions are made without regard to any characteristic protected by applicable laws and regulations. Information collected during the hiring process is used solely to assess qualifications, verify identity, and comply with legal requirements.