GRC Security Analyst

At Appfire, we believe that great work happens when people get to choose how they work. After 20 years of creating software that empowers teams to break silos and collaborate seamlessly, we've learned that one size does not fit all. That's why at Appfire, you choose.

Choose to work where you thrive: Whether from home, in one of our offices, or while exploring the world, you decide where you're most productive. From hardware and software to access to two decades of collective wisdom on working effectively in a remote-first company, we've got you covered.

Choose to balance your life without compromise: Plan your workday around your needs and what matters most to you. Enjoy flexible time off without the hassle of complicated approvals. From day one, we trust you to deliver quality work without sacrificing your personal life, hobbies, loved ones, and well-being.

• Work on the coordination and facilitation of Appfire's security governance goals and initiatives
• Support our sales channels regarding prospect and customer security questions, assessments, and audits, including speaking to technical controls and their alternatives and appropriate risk mitigation.
• Conduct assessments related to vendor risk management and follow up on associated findings.
• Provide support for regulatory and compliance initiatives (e.g. ISO 27001, SOC2, GDPR, etc.).
• Identify, document, and track information security policy-related non-conformities and assist in developing and monitoring corrective action plans.
• Assist in identifying & tracking information security risks, assessing impact, and tracking the execution of mitigation plans.
• Assist in tracking information security risk acceptances and exceptions and monitoring the execution of remediation plans.
• Track and ensure adequate and timely resolution to all audit and risk assessment findings/issues relating to information security.
• Assist in the monitoring of business continuity (BC) and disaster recovery (DR) testing.
• Perform periodic compliance checks across the Appfire organization.
• Provide support for the coordination and execution of integration plans for Appfire acquisitions.
• Support the annual review and update of information security-related policies and processes.
• Participate in and support annual security awareness campaigns.
• Handle sensitive and/or confidential material and information with suitable discretion.

• Bachelor's Degree in Computer Science, Information Security, Engineering, related curriculum, or equivalent experience.
• 2+ years of experience working in information security risk and/or compliance roles.
• Knowledge of common Information Security frameworks such as CIS, ISO 27001 & SOC 2.
• Prior experience with cloud-based security tools, technologies, and controls a plus (e.g, Amazon AWS, Azure, Heroku, GCP)
• Ability to work effectively within a fast-paced, changing environment that is going through high growth.
• A self-starter with the demonstrated ability to take initiative, who can proactively identify issues/opportunities and recommend actions.
• Creative problem solving required
• Excellent interpersonal and communication skills
• CISA, CISSP, or similar security/GRC-focused certifications are a plus.

• You are dedicated to elevating client and co-worker experiences, knowing that exceptional work centers on serving others.
• You adapt swiftly to new business demands, understanding that change fuels collective and individual growth.
• You excel in communication, effectively connecting in remote/hybrid environments using tools like Slack, Zoom, and G Suite and through occasional in-person events.
• You have exceptional coaching, mentoring, and people development skills.

• Salary Ranges: Perm (UoP) 12,000 - 16 000 PLN gross/month.

• Every Appfire employee is eligible for company equity.
• Home Office allowance - 200 PLN/month to cover your electricity and internet bills.
• MyBenefit Platform - 150 PLN/month to spend on shopping, culture and entertainment, Multisport, travel, and more.
• Lunch Card - 300 PLN/month to spend on groceries/restaurants (excluding alcohol and other excise duties items).
• You can apply for a 50% tax-deductible cost on creative works (AKUP/IP tax-deductible costs).

• Access to the Appfire University learning platform - a hub of knowledge, interactive resources, and engaging instructor-led courses designed to fuel your learning journey with unparalleled depth and accessibility.
• English language courses.

• 26 working days of paid annual leave, regardless of years of experience.
• Wellness Days - additional time off each month to recharge and take care of yourself.
• Private healthcare.
• Life Insurance.

• 3 fully paid days each year to participate in Appfire Town, Appfire's Corporate Social Responsibility (CSR) Program.

• Indefinite Employment contract from day one, no trial periods.

1. We follow teams. We do our research and build software that solves real-life collaboration challenges while being easy to implement and a joy to use. We're proud to support over 20,000 customers and growing, including 55% of the Fortune 500. From the entertainment delivered by Netflix to the devices crafted by Samsung, and Dell Technologies and the financial transactions handled by Visa, Edward Jones, and US Bank, Appfire's technology is indispensable. Our products also play a pivotal role in streamlining operations and fostering innovation at companies like Tesla and significant institutions such as NASA, Boeing, and many more.
2. We enhance. We don't compete. Our software is designed to give developers, knowledge workers, and teams the ability to extend and get greater value from the platforms they've invested in and enjoy. So far, our solutions extend and enhance the capabilities offered by Atlassian, Microsoft, monday.com, and Salesforce.
3. We build bridges and invest in our partners. Appfire's success is underscored by the fact that the company has no direct sales team and instead leverages its channel program as its primary path to market. Today, Appfire has a dedicated Channel team supporting 700+ channel partners.
4. We make security and privacy a priority, but we also keep it simple for our customers. We've achieved International Organization for Standardization (ISO) 27001 and ISO 27017 and System and Organization Controls (SOC) SOC 2, Type I and SOC 2, Type II certifications. In 2022, we launched our award-winning Appfire Trust Center, offering our customers, partners, and prospects the latest security, privacy, and compliance information, including pre-completed questionnaires (CAIQ, SIG, and VSA) with an accelerated NDA process and just one EULA to cover it all.