> Markdown version of [/jobs/ext/319520-grc-security-analyst-information-security](https://www.wearedevelopers.com/jobs/ext/319520-grc-security-analyst-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Security Analyst - Information Security - **Company:** Appfire - **Location:** Spain (Remote available) - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Disaster Recovery, Software Engineering, Google Cloud, Heroku, Information Technology - **Published:** June 4, 2026 - **Apply:** https://es.indeed.com/viewjob?jk=0942054a8caec234 ## About the Role * Bachelor's Degree in Computer Science, Information Security, Engineering, related curriculum, or equivalent experience. * 2+ years of experience working in information security risk and/or compliance roles. * Knowledge of common Information Security frameworks such as CIS, ISO 27001 & SOC 2. * Prior experience with cloud-based security tools, technologies, and controls a plus (e.g, Amazon AWS, Azure, Heroku, GCP) * Ability to work effectively within a fast paced, changing environment that is going through high growth. * A self-starter with the demonstrated ability to take initiative, who can proactively identify issues/opportunities and recommend actions. * Creative problem solving required * Excellent interpersonal and communication skills * CISA, CISSP or similar security/GRC focused certifications a plus. ## Description Do you have a strong understanding of information security GRC operations? Have you built lasting relationships with business owners and vendors? Appfire, the leading provider of Atlassian apps, is looking for a creative problem-solver and a self-starter to join our Information Security team. The GRC Security Analyst will handle diverse security-related tasks and issues for our rapidly growing company, including managing risk through a shared vision with Appfire's business leaders. You'll work within the GRC department managing diverse governance, risk and compliance security-related tasks and issues for our rapidly growing company, with a focus on people, practices, systems, and metrics. You'll be asked to keep up with the latest industry requirements and will assist in the identification of security risks and the associated execution of remediation and corrective action plans, ensuring we are following up with those steps previously agreed upon by the business. Additionally, you'll participate in regular vendor reviews and ensure compliance with Appfire policy, as well as provide ISO 27001 and other audit support. If you're a highly organized, detail-oriented expert communicator, let's chat! You will be expected to engage in professional development to maintain continual growth in professional skills and knowledge essential to the position and thrive in a highly collaborative workplace. Lists (Requirements & Responsibilities) * Work on the coordination and facilitation of Appfire's security governance goals and initiatives * Support our sales channels regarding prospect and customer security questions, assessments, and audits, including speaking to technical controls and their alternatives and appropriate risk mitigation. * Conduct assessments related to vendor risk management and following up on associated findings. * Provide support for regulatory and compliance initiatives (e.g. ISO 27001, SOC2, GDPR, etc.). * Identify, document, and track information security policy related non-conformities and assist in developing and monitoring corrective action plans. * Assist in identifying & tracking information security risks, assessing impact, and tracking the execution of mitigation plans. * Assist in tracking information security risk acceptances and exceptions and monitoring the execution of remediation plans. * Track and ensure adequate and timely resolution to all audit and risk assessment findings/issues relating to information security. * Assist in the monitoring of business continuity (BC) and disaster recovery (DR) testing. * Perform periodic compliance checks across the Appfire organization. * Provide support for the coordination and execution of integration plans for Appfire acquisitions. * Support the annual review and update of information security related policies and processes. * Participate in and support annual security awareness campaigns. * Handle sensitive and/or confidential material and information with suitable discretion., * Private health insurance through IMQ or Adeslas, fully covered by Appfire for enrolled employees * Family members may also be added at a discounted rate through payroll deduction * €400 gross annual sport allowance for gym memberships, outdoor activities, sports equipment, running gear, and other wellness-related expenses Work-from-Home Support Appfire provides €50 per month to help cover home office and remote work expenses. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Coffee with Developers - Adam Wiggins](https://www.wearedevelopers.com/videos/919-coffee-with-developers-adam-wiggins) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)