Security Audit Compliance Analyst

About the role

Appfire is looking for a Security Audit Compliance Analyst to ensure that the organisation complies with various security regulations, standards, and best practices. This role involves conducting security audits, analysing compliance data, and working closely with IT and security teams to identify and mitigate risks.

Your everyday tasks will include:

• Conduct Security Audits: Plan, execute, and report on security audits to assess compliance with internal policies and external regulations (e.g., SOC2, ISO27001:2022, ISO27017, FedRamp. etc).
• Compliance Monitoring: Continuously monitor compliance with security policies and procedures, identifying areas for improvement.
• Risk Assessment: Perform risk assessments to identify vulnerabilities and recommend remediation strategies.
• Documentation: Maintain up-to-date documentation of compliance activities, audit findings and remediation efforts.
• Collaboration: Work closely with ITOps, DevOps, information security, and other departments to ensure alignment on compliance initiatives.
• Reporting: Prepare and present audit findings and compliance reports to management and stakeholders.
• Policy Development: Assist in the development and revision of security policies and procedures.

Skills and experience you'll need to succeed:

• Education: Bachelor’s degree in Information Security, Computer Science, or a related field.
• Experience: 3+ years of experience in security auditing, compliance, or a related field.
• Certifications: Relevant certifications (e.g., CISA, CISSP, CISM) are a plus.
• Knowledge: Strong understanding of security frameworks (e.g., NIST, ISO 27001) and regulatory requirements.
• Analytical Skills: Excellent analytical and problem-solving skills.
• Communication: Strong written and verbal communication skills, with the ability to convey complex information to non-technical stakeholders.
• Attention to Detail: Meticulous attention to detail and a commitment to accuracy.
• Nice to have: Familiarity with security tools and technologies (e.g., SIEM, vulnerability management tools).
• Nice to have: Experience with risk management and assessment methodologies.

Beyond the resume skills that match our culture and this role:

• You are dedicated to elevating client and co-worker experiences, knowing that exceptional work centers on serving others.
• You adapt swiftly to new business demands, understanding that change fuels collective and individual growth.
• You excel in communication, effectively connecting in remote/hybrid environments using tools like Slack, Zoom, and G Suite and through occasional in-person events.
• You have exceptional coaching, mentoring, and people development skills.

We offer:

Form of employment

• Permanent employment contract (UoP)

Financial benefits

• Every Appfire employee is eligible for company equity.
• Home Office allowance – 200 PLN/month to cover your electricity and internet bills.
• MyBenefit Platform – 150 PLN/month to spend on shopping, culture and entertainment, Multisport, travel, and more.
• Lunch Card – 300 PLN/month to spend on groceries/restaurants (excluding alcohol and other excise duties items).

Skills development benefits

• Access to the Appfire University learning platform, a hub of knowledge, interactive resources, and engaging instructor-led courses designed to fuel your learning journey with unparalleled depth and accessibility.
• English language courses.

PTO, health & well-being

• 26 working days of paid annual leave, regardless of years of experience.
• Wellness Days – additional time off each month to recharge and take care of yourself.
• Private healthcare.
• Life Insurance

Volunteering

• 3 fully paid days each year to participate in Appfire Town, Appfire’s Corporate Social Responsibility (CSR) Program.

Other

• Indefinite Employment contract from day one, no trial periods.

#LI-remote