Remote GRC Security Analyst – ISO 27001 & Compliance

Appfire; Spain (TX); Remote; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Private health insurance

Remote within Spain

Home office stipend

Job summary

Appfire is seeking a GRC Security Analyst to manage governance, risk and compliance tasks within the Information Security team. You will partner with business leaders, maintain security controls, and support audits and regulatory requirements.

You will help identify risks, coordinate remediation, and ensure policy adherence across our rapidly growing, fully remote environment in Spain. A proactive, collaborative communicator will thrive here.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent.
• 2+ years in information security risk or compliance roles.
• Knowledge of CIS, ISO 27001, SOC 2.
• Experience with cloud security tools and controls (AWS/Azure/GCP/Heroku).
• Ability to navigate fast-growing environments and take initiative.
• CISA/CISSP or similar certifications are a plus.

Responsibilities

• Coordinate security governance goals and initiatives.
• Assist sales with security questions, assessments, audits, and risk mitigation.
• Conduct vendor risk assessments and track findings.
• Support regulatory and compliance initiatives (ISO 27001, SOC2, GDPR).
• Document and monitor information security policy non-conformities and corrective actions.
• Identify and track information security risks and remediation plans.
• Monitor audit findings and ensure timely resolutions.
• Support BC/DR testing and annual security awareness campaigns.
• Coordinate integration plans for acquisitions.

Skills

Risk management

Compliance

GRC

Vendor risk

Security awareness

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

AWS

Azure

GCP

Heroku

Job description

Appfire is seeking a GRC Security Analyst to manage governance, risk and compliance tasks within the Information Security team. You will partner with business leaders, maintain security controls, and support audits and regulatory requirements.

You will help identify risks, coordinate remediation, and ensure policy adherence across our rapidly growing, fully remote environment in Spain. A proactive, collaborative communicator will thrive here.