Information Security Specialist - GRC

SmartRecruiters understands that data is the core of our business. That’s why we’ve built Information Security structures with the Security Council as the decision body and the Board of Representatives as the execution team. Keeping data secure is the most crucial thing nowadays. That's why we put much effort into making it smart, easy and effective. 

Responsibilities: 

• Oversee a varied and complex regulatory compliance program covering multiple domains and disciplines. 
• Managing the stakeholder expectation & partnering with stakeholders to ensure management of IT risks and compliance. 
• Maintain regional and local stakeholder relationships, meeting schedules, minutes, reports 
• Cooperation in SOC-2 framework maintenance
• Effectively manage ISO 27001  audits and coordinate with stakeholder improvements of ISMS 
• Effectively implement and maintain the TISAX framework 
• Maintain, manage, and monitor regional and local compliance to the ISMS frameworks such as Enterprise Risk Management, Asset and Access Management,  GDPR, and SOC2 regulatory/legal and other obligations/requirements. 
• Appropriately analyze security findings and mediate issues with control owner /assurance partners. 
• Provide support in using evidence repositories to control owners. 
• Provide support of policy/standards exceptions, report status to regional and local management, and advise on corrective actions. 
• Prepare stakeholder presentations for stakeholders and senior leadership 
• Understanding of risks and risk assessments

SmartRecruiters is a values-driven, global-minded, and well-funded tech employer on a mission to connect people to jobs at scale. As a global leader in enterprise recruitment software, SmartRecruiters offers a cloud-based global Hiring Success platform that allows teams to attract, select, and hire the best talent. 4,000 companies worldwide rely on SmartRecruiters to achieve hiring success—including brands like Bosch, LinkedIn, Skechers, and Visa—using recruitment marketing, CRM, AI, ATS, and a marketplace of 600+ connected vendors all within one scalable platform.

We are proud to offer a collaborative, diverse, and remote-friendly work environment, as well as competitive salaries and generous equity. We believe in promotion from within, so high performance can lead to upward mobility. Needless to say, we make sure you’re taken care of. Our inclusive office environment welcomes and respects all.

SmartRecruiters enables Hiring Without Boundaries™ by freeing talent acquisition teams from legacy applicant tracking software. SmartRecruiters’ next-generation platform serves as the hiring operating system for 4,000 customers like Bosch, LinkedIn, Skechers, and Visa. Companies with business-critical hiring needs turn to SmartRecruiters for best-of-breed functionality, world-class support, and a robust ecosystem of third-party applications and service providers.

Required Experience: 

• Compliance or auditing experience for one regulation – ISO 27001, GDPR and SOC-2 
• Ability to take over and deliver on multiple complexity projects at the same time, with minimum supervision 
• Detailed knowledge controls auditing principles with a focus on SOC-2
• Knowledge of controls manifestation in small global corporations with regional and local presence is required. 
• Good understanding of coordination and facilitation roles. 
• The ability to investigate, question, and interpret internal and external IT security and compliance issues is required. 
• A good understanding of technology and cloud-based products is required. 
• Experience in working across business units and geographical boundaries to engage engineering, business, and team members is required. 

SmartRecruiters is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.