GRC Security Analyst - Information Security

Location: Spain

At Appfire, we believe that great work happens when people get to choose how they work. After 20 years of creating software that empowers teams to break silos and collaborate seamlessly, we've learned that one size does not fit all. That's why at Appfire, you choose.

Choose to work where you thrive:
Whether from home, in one of our offices, or while exploring the world, you decide where you're most productive. From hardware and software to access to two decades of collective wisdom on working effectively in a remote-first company, we've got you covered.

Choose to balance your life without compromise:
Plan your workday around your needs and what matters most to you. Enjoy flexible time off without the hassle of complicated approvals. From day one, we trust you to deliver quality work without sacrificing your personal life, hobbies, loved ones, and well-being.

Choose to grow on your terms:
Take charge of your professional growth with access to online learning platforms, facilitated training, leadership programs, and internal hackathons. Collaborate with a global team to gain fresh perspectives. When you're ready for a new challenge, our internal mobility program is here to support your journey.

No one knows you better than you do. So join us and customize your experience. Choose how you want to work. Choose Appfire.

About us

We are Appfire, the largest global provider of award-winning Atlassian apps! Our portfolio of trusted product brands includes more than 200+ purpose-built apps loved by thousands of teams and millions of users worldwide.

Amplified by our partnership and strategic investment from private equity powerhouse Silversmith Capital Partners, a recent surge of marquee brand acquisitions, and an additional $100M investment from TA Associates, Appfire is uniquely poised to accelerate our leadership position within the billion-dollar Atlassian app market.

Come be a part of our Appfire family for this amazing journey! Learn more at

Job Purpose & Overview

Do you have a strong understanding of information security GRC operations? Have you built lasting relationships with business owners and vendors? Appfire, the leading provider of Atlassian apps, is looking for a creative problem-solver and a self-starter to join our Information Security team. The GRC Security Analyst will handle diverse security-related tasks and issues for our rapidly growing company, including managing risk through a shared vision with Appfire's business leaders.

You'll work with in the GRC department managing diverse governance, risk and compliance security-related tasks and issues for our rapidly growing company, with a focus on people, practices, systems, and metrics. You'll be asked to keep up with the latest industry requirements and will assist in the identification of security risks and the associated execution of remediation and corrective action plans, ensuring we are following up with those steps previously agreed upon by the business.

Additionally, you'll participate in regular vendor reviews and ensure compliance with Appfire policy, as well as provide ISO 27001 and other audit support.

If you're a highly organized, detail-oriented expert communicator, let's chat!

You will be expected to engage in professional development to maintain continual growth in professional skills and knowledge essential to the position and thrive in a highly collaborative workplace.

Lists (Requirements & Responsibilities)

* Work on the coordination and facilitation of Appfire's security governance goals and initiatives

* Support our sales channels regarding prospect and customer security questions, assessments, and audits, including speaking to technical controls and their alternatives and appropriate risk mitigation.

* Conduct assessments related to vendor risk management and following up on associated findings.

* Provide support for regulatory and compliance initiatives (e.g. ISO 27001, SOC2, GDPR, etc.).

* Identify, document, and track information security policy related non-conformities and assist in developing and monitoring corrective action plans.

* Assist in identifying & tracking information security risks, assessing impact, and…