Remote GRC Security Analyst – Information Security

Appfire; United States; Remote; USD 68,000 - 90,000; Full time

Benefits offered by this job

Equity

25 days annual leave

Remote work in Spain

Home office stipend €50/month

Health insurance

Job summary

Appfire, a leading provider of Atlassian apps, seeks a GRC Security Analyst to manage governance, risk and compliance across a fast-growing, globally distributed team. You will collaborate with business owners and vendors to uphold security controls and regulatory requirements.

The role focuses on risk identification, remediation planning, and audit support, ensuring policy compliance and continuous improvement in information security practices across Appfire’s environment.

Qualifications

• Bachelor’s Degree in Computer Science, Information Security, Engineering, related curriculum, or equivalent experience.
• 2+ years of experience working in information security risk and/or compliance roles.
• Knowledge of common Information Security frameworks such as CIS, ISO 27001 & SOC 2.
• Prior experience with cloud-based security tools, technologies, and controls (AWS, Azure, Heroku, GCP).
• Ability to work effectively in a fast-paced, high-growth environment.
• CISA, CISSP or similar security/GRC certifications a plus.

Responsibilities

• Coordinate and facilitate Appfire’s security governance goals and initiatives.
• Support sales channels with security questions, assessments, and audits, including controls and risk mitigation.
• Conduct vendor risk assessments and follow up on findings.
• Support regulatory and compliance initiatives (ISO 27001, SOC2, GDPR).
• Identify and track information security policy non-conformities and help develop corrective action plans.
• Identify and track information security risks, assess impact, and monitor remediation efforts.
• Track risk acceptances and exceptions and ensure remediation is executed.
• Monitor audit and risk findings and ensure timely resolution.
• Support business continuity (BC) and disaster recovery (DR) testing.
• Perform periodic compliance checks across the organization.
• Assist integration plans for Appfire acquisitions.
• Support annual review and updating of security policies and processes.
• Participate in annual security awareness campaigns.

Skills

2+ years in information security risk

Knowledge of CIS ISO 27001 SOC 2

Strong communication skills

Self-starter with initiative

Education

Bachelor’s Degree in Computer Science, Information Security, or related field

Tools

Amazon AWS

Azure

Heroku

GCP

Job description

Appfire, a leading provider of Atlassian apps, seeks a GRC Security Analyst to manage governance, risk and compliance across a fast-growing, globally distributed team. You will collaborate with business owners and vendors to uphold security controls and regulatory requirements.

The role focuses on risk identification, remediation planning, and audit support, ensuring policy compliance and continuous improvement in information security practices across Appfire’s environment.