Remote Information Security Analyst - Vendor Risk & GRC

Scale Up Recruiting Partners; Kraków; On-site; PLN 332,000 - 443,000; Full time

Job summary

Scale Up is assisting a fast-growing U.S.-based cybersecurity and compliance firm in Kraków with an Information Security Analyst contract role. You will own the vendor security questionnaire process across multiple client accounts and coordinate with startups, security stakeholders, and technical teams to deliver accurate responses.

You will work in a remote, fast-paced consulting environment, handling SIG/CAIQ questionnaires and maintaining knowledge bases while ensuring enterprise deals close

Qualifications

• 2–4 years of experience in vendor security questionnaires or GRC/compliance.
• Hands-on experience with SIG, CAIQ, or similar questionnaires.
• Knowledge of SOC 2 and ISO 27001 controls.

Responsibilities

• Monitor Slack channels and respond to security questionnaire requests.
• Create and manage tickets in Jira/Linear to track requests.
• Complete vendor security questionnaires using OneTrust/Whistic/SecurityScorecard.
• Develop understanding of each client's security posture and controls.
• Maintain and improve client answer libraries and knowledge bases.
• Coordinate with security engineers and SMEs for clarifications.
• Escalate gaps that affect questionnaire responses.
• Ensure questionnaires are completed on time.

Skills

Vendor risk mgmt

GRC/compliance

Security questionnaires

SOC 2

ISO 27001

SSO

MFA

Endpoint management

Encryption

Cloud fundamentals

Tools

OneTrust

Whistic

SecurityScorecard

Jira

Linear

Conveyor

SafeBase

Vanta

Trust Center platforms

Job description

Scale Up is assisting a fast-growing U.S.-based cybersecurity and compliance firm in Kraków with an Information Security Analyst contract role. You will own the vendor security questionnaire process across multiple client accounts and coordinate with startups, security stakeholders, and technical teams to deliver accurate responses.

You will work in a remote, fast-paced consulting environment, handling SIG/CAIQ questionnaires and maintaining knowledge bases while ensuring enterprise deals close