GRC Security Analyst - Information Security

Stack

Responsibilities

• ▹Coordinate and facilitate security governance goals and initiatives
• ▹Support sales channels with prospect and customer security questions, assessments and audits, speaking to technical controls, their alternatives and risk mitigation
• ▹Conduct vendor risk management assessments and follow up on findings
• ▹Support regulatory and compliance initiatives (e.g. ISO 27001, SOC 2, GDPR)
• ▹Identify, document and track information security policy non-conformities and assist in developing and monitoring corrective action plans
• ▹Assist in identifying and tracking information security risks, assessing impact and tracking mitigation plans
• ▹Track risk acceptances and exceptions and monitor remediation plans
• ▹Ensure adequate and timely resolution of audit and risk assessment findings
• ▹Assist in monitoring business continuity (BC) and disaster recovery (DR) testing
• ▹Perform periodic compliance checks across the organization
• ▹Support coordination and execution of integration plans for Appfire acquisitions
• ▹Support the annual review of information security policies and processes
• ▹Participate in annual security awareness campaigns

Requirements

• ▹Bachelor's degree in Computer Science, Information Security, Engineering or a related field, or equivalent experience
• ▹2+ years of experience in information security risk and/or compliance roles
• ▹Knowledge of common information security frameworks such as CIS, ISO 27001 and SOC 2
• ▹Ability to work effectively in a fast-paced, changing, high-growth environment
• ▹Self-starter who proactively identifies issues and opportunities
• ▹Creative problem solving
• ▹Excellent interpersonal and communication skills

Nice to have

• ▹Experience with cloud-based security tools, technologies and controls (e.g. AWS, Azure, Heroku, GCP)
• ▹CISA, CISSP or similar security/GRC certifications

Soft skills

What we offer

• ▹Company equity for every team member
• ▹26 paid vacation days annually, regardless of tenure
• ▹12 Wellness Days: one fully paid day off each month, ad-hoc, not carried over
• ▹24 hours of paid volunteer time
• ▹3 fully paid volunteering days a year through Appfire Town, the CSR program
• ▹Appfire University: custom, on-demand learning platform
• ▹Private health insurance through UNIQA, fully covered by Appfire
• ▹Multisport Card, fully paid by Appfire
• ▹Food vouchers on a prepaid Pluxee lunch card with a monthly allowance
• ▹Fully paid Sofia City Transport Card for employees in Sofia
• ▹One-time net Baby Bonus upon the birth of a child
• ▹Fully remote within Bulgaria

About the company

Appfire is the largest global provider of Atlassian apps, with 800+ employees working remotely across 28 countries. Its products include JXL, Comala Document Management, 7Pace Time Tracker, Jira Misc Workflow Extensions and BigPicture.