GRC Security Analyst - Information Security

Stack

Responsibilities

• ▹Coordinate and facilitate security governance goals and initiatives
• ▹Support sales channels with prospect and customer security questions, assessments and audits, speaking to technical controls, their alternatives and risk mitigation
• ▹Conduct vendor risk management assessments and follow up on findings
• ▹Support regulatory and compliance initiatives (e.g. ISO 27001, SOC 2, GDPR)
• ▹Identify, document and track information security policy non-conformities and assist in developing and monitoring corrective action plans
• ▹Assist in identifying and tracking information security risks, assessing impact and tracking mitigation plans
• ▹Track risk acceptances and exceptions and monitor remediation plans
• ▹Ensure adequate and timely resolution of audit and risk assessment findings
• ▹Assist in monitoring business continuity (BC) and disaster recovery (DR) testing
• ▹Perform periodic compliance checks across the organization
• ▹Support coordination and execution of integration plans for Appfire acquisitions
• ▹Support the annual review of information security policies and processes
• ▹Participate in annual security awareness campaigns

Requirements

• ▹Bachelor's degree in Computer Science, Information Security, Engineering or a related field, or equivalent experience
• ▹2+ years of experience in information security risk and/or compliance roles
• ▹Knowledge of common information security frameworks such as CIS, ISO 27001 and SOC 2
• ▹Ability to work effectively in a fast-paced, changing, high-growth environment
• ▹Self-starter who proactively identifies issues and opportunities
• ▹Creative problem solving
• ▹Excellent interpersonal and communication skills

Nice to have

• ▹Experience with cloud-based security tools, technologies and controls (e.g. AWS, Azure, Heroku, GCP)
• ▹CISA, CISSP or similar security/GRC certifications

Soft skills

What we offer

• ▹Company equity for every team member
• ▹25 days of annual leave per calendar year; up to 10 unused days can be carried over and must be used by December 31
• ▹Reduced summer hours
• ▹Flexible bank holidays: exchange one public holiday for another
• ▹Fully remote within Spain, with the option to work from the Bilbao office
• ▹Appfire University: custom, on-demand learning platform
• ▹Private health insurance through IMQ or Adeslas, fully covered by Appfire for enrolled employees
• ▹Family members can be added at a discounted rate through payroll deduction
• ▹EUR 400 gross annual sport allowance (gym memberships, outdoor activities, sports equipment, running gear and other wellness expenses)
• ▹EUR 50 per month for home office and remote work expenses
• ▹3 fully paid volunteering days a year through Appfire Town, the CSR program

About the company

Appfire is the largest global provider of Atlassian apps, with 800+ employees working remotely across 28 countries. Its products include JXL, Comala Document Management, 7Pace Time Tracker, Jira Misc Workflow Extensions and BigPicture.