Senior InfoSec Engineer: GRC & AI Security

SmartRecruiters; Kraków; On-site; PLN 180,000 - 270,000; Full time

Job summary

SmartRecruiters is seeking a Senior Information Security Engineer to join the Governance, Risk & Compliance (GRC) team. This role blends hands-on security engineering with governance, risk, and compliance to ensure critical applications and processes meet ISO, SOC, GDPR, and EU AI Act requirements.

The successful candidate will drive automation, support audits, and embed security controls across CI/CD and cloud environments, while providing hands-on guidance to engineering and security teams.

Qualifications

• 5+ years of experience in information security, governance, risk, and/or compliance with a technical orientation.
• Demonstrated compliance or auditing experience with at least one major framework.
• Strong understanding of controls auditing and evidence management.
• Knowledge of risk management methodologies and risk assessments.
• Ability to manage multiple complex projects with minimal supervision.
• Understanding of cloud-based SaaS environments.
• Excellent written and verbal communication in English.

Responsibilities

• Identify manual GRC processes and design automation blueprints to streamline them.
• Build automated workflows to reduce manual effort and improve audit-readiness.
• Develop reusable templates, playbooks, and standardised blueprints for recurring GRC activities."
• Collaborate with engineering and IT teams to integrate security and compliance checks into CI/CD pipelines.
• Continuously evaluate and improve GRC tooling, data flows, and reporting.
• Support ISO 27001 and ISO 22301 audit lifecycles and coordination with stakeholders.

Skills

Information security

GRC

ISO 27001

ISO 22301

Auditing

Cloud security

CI/CD

Job description

SmartRecruiters is seeking a Senior Information Security Engineer to join the Governance, Risk & Compliance (GRC) team. This role blends hands-on security engineering with governance, risk, and compliance to ensure critical applications and processes meet ISO, SOC, GDPR, and EU AI Act requirements.

The successful candidate will drive automation, support audits, and embed security controls across CI/CD and cloud environments, while providing hands-on guidance to engineering and security teams.