Information Security GRC Specialist (IT Risk & Compliance)

Our requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field.
• 3-5 years of experience supporting Information Security, GRC, or Customer Trust functions, including customer security questionnaires, audits, assessments, and customer-facing security programs.
• Working knowledge of information security and privacy frameworks such as ISO 27001, SOC 2, GDPR, FCRA, or similar regulatory and compliance standards.
• Experience supporting third-party assurance activities; familiarity with Conveyor, CAIQ, HECVAT, SIG, or similar assessment frameworks is a plus.
• Experience managing customer trust portals and security knowledge repositories is preferred.
• Relevant certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are preferred.
• Strong project management and organizational skills; Jira experience is a plus.
• Familiarity with core IT infrastructure, cloud technologies, and information security concepts.
• Excellent customer service, relationship management, written, and verbal communication skills.
• Self-motivated professional with strong analytical abilities, attention to detail, and the ability to work independently while collaborating effectively across teams.
• English proficiency required, as the role involves frequent customer-facing interactions and communications.

Your responsibilities

• Lead customer-facing security activities, including security questionnaires, risk assessments, audits, project security reviews, and remediation tracking.
• Manage information security compliance, risk management, third-party assurance activities, and governance processes that support customer-facing security and compliance commitments.
• Respond to customer requests for security, compliance, and privacy information by coordinating evidence collection and communicating the organization's security posture.
• Serve as the primary liaison for customer trust engagements, leveraging established procedures to manage assessments, audits, and due diligence requests.
• Evaluate customer security requests, identify opportunities for improvement, and communicate recommendations to management and key stakeholders.
• Partner with business units and cross-functional teams to support customer requirements and ensure timely completion of security and compliance deliverables.
• Review corrective action plans and advise stakeholders on remediation strategies for compliance gaps, audit findings, and identified vulnerabilities.
• Continuously enhance customer trust processes, documentation, and knowledge resources.
• Perform additional compliance, governance, and risk-related duties as assigned.

What we offer

• Private Medical Care
• Edenred card
• Lunch Vouchers
• Lunch Break
• Social Fund (Holiday Allowance, Glasses Voucher)
• Bonus Plans
• Group Life Insurance
• Career Path & Opportunities to Grow
• Professional Training
• Hybrid work (3 times per week working from our office in Katowice)

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• flexible working time
• fruits
• integration events
• retirement pension plan
• no dress code
• video games at work
• coffee / tea
• drinks
• leisure zone
• pre-paid cards
• sharing the costs of tourist services
• sharing the costs of tickets to the movies, theater
• holiday funds
• employee referral program
• charity initiatives
• lunch vouchers
• paid lunch break (30 Minutes)
• career path & opportunities to grow
• glasses voucher
• bonus plans
• friendly atmosphere
• professional training

HireRight Poland Sp. z o.o.