Information Security GRC Specialist (IT Risk & Compliance)

Operating system, Windows

Your responsibilities, Lead customer-facing security activities, including security questionnaires, risk assessments, audits, project security reviews, and remediation tracking., Manage information security compliance, risk management, third-party assurance activities, and governance processes that support customer-facing security and compliance commitments., Respond to customer requests for security, compliance, and privacy information by coordinating evidence collection and communicating the organization's security posture., Serve as the primary liaison for customer trust engagements, leveraging established procedures to manage assessments, audits, and due diligence requests., Evaluate customer security requests, identify opportunities for improvement, and communicate recommendations to management and key stakeholders., Partner with business units and cross-functional teams to support customer requirements and ensure timely completion of security and compliance deliverables., Review corrective action plans and advise stakeholders on remediation strategies for compliance gaps, audit findings, and identified vulnerabilities., Continuously enhance customer trust processes, documentation, and knowledge resources., Perform additional compliance, governance, and risk-related duties as assigned.

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field., 3-5 years of experience supporting Information Security, GRC, or Customer Trust functions, including customer security questionnaires, audits, assessments, and customer-facing security programs., Working knowledge of information security and privacy frameworks such as ISO 27001, SOC 2, GDPR, FCRA, or similar regulatory and compliance standards., Experience supporting third-party assurance activities; familiarity with Conveyor, CAIQ, HECVAT, SIG, or similar assessment frameworks is a plus., Experience managing customer trust portals and security knowledge repositories is preferred., Relevant certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are preferred., Strong project management and organizational skills; Jira experience is a plus., Familiarity with core IT infrastructure, cloud technologies, and information security concepts., Excellent customer service, relationship management, written, and verbal communication skills., Self-motivated professional with strong analytical abilities, attention to detail, and the ability to work independently while collaborating effectively across teams., English proficiency required, as the role involves frequent customer-facing interactions and communications.

What we offer, Private Medical Care, Edenred card, Lunch Vouchers, Lunch Break, Social Fund (Holiday Allowance, Glasses Voucher), Bonus Plans, Group Life Insurance, Career Path & Opportunities to Grow, Professional Training, Hybrid work (3 times per week working from our office in Katowice)

Benefits, sharing the costs of sports activities, private medical care, life insurance, flexible working time, fruits, integration events, retirement pension plan, no dress code, video games at work, coffee / tea, drinks, leisure zone, pre-paid cards, sharing the costs of tourist services, sharing the costs of tickets to the movies, theater, holiday funds, employee referral program, charity initiatives, lunch vouchers, paid lunch break (30 Minutes), career path & opportunities to grow, glasses voucher, bonus plans, friendly atmosphere, professional training

HireRight Poland Sp. z o.o., HireRight is the premier global background screening and workforce solutions provider. We bring clarity and confidence to vetting and hiring decisions through integrated, tailored solutions, driving a higher standard of accuracy in everything we do. Combining in-house talent, personalized services, and proprietary technology, we ensure the best candidate experience possible. PBSA accredited and based in Nashville, TN, we offer expertise from our regional centers across 200 countries and territories in The Americas, Europe, Asia, and the Middle East. Our commitment to get it right every time, everywhere, makes us the trusted partner of businesses and organizations worldwide.

This is how we work,