[Hiring] Senior Information Security Specialist @SmartRecruiters Inc

Role Description

SmartRecruiters is looking for a Senior Information Security Specialist to join the Governance, Risk & Compliance (GRC) team. This role is critical to ensuring that SmartRecruiters' applications, systems, and processes remain compliant with industry standards and regulatory requirements, including:

• ISO 27001
• ISO 22301
• ISO 42001
• SOC 2 Type II
• Cyber Essentials
• GDPR
• EU AI Act

The successful candidate will combine strong GRC expertise with a technical, engineering mindset. Responsibilities include:

• Driving compliance programmes across multiple frameworks.
• Assessing security architectures and supporting forensic investigations.
• Building automation to replace manual processes.
• Providing hands-on guidance to engineering and security teams.
• Identifying opportunities to engineer scalable, repeatable solutions.

Qualifications

• 5+ years of experience in information security, governance, risk, and/or compliance roles with a technical orientation.
• Demonstrated compliance or auditing experience with at least one major framework.
• Hands-on experience with incident response, including participation in security incident investigations.
• Solid understanding of controls auditing principles and evidence management.
• Technical understanding of cloud infrastructure (AWS preferred), networking fundamentals, identity management, and SaaS security architectures.
• Knowledge of risk management methodologies and experience conducting or supporting risk assessments.
• Ability to manage and deliver on multiple complex projects simultaneously, with minimal supervision.
• Strong understanding of technology, cloud-based products, and SaaS environments.
• Experience working across business units and geographical boundaries.
• Experience with ISO 27001.
• Excellent written and verbal communication skills in English.

Requirements

• Experience with ISO 9001, 27017, and 27018.
• Experience with ISO 22301 (Business Continuity), including BIA, BCP/DRP, and recovery testing.
• Experience with BSI C5 (Cloud Computing Compliance Criteria Catalogue) or similar cloud-specific compliance frameworks.
• Knowledge of AI security principles, experience with ISO 42001, or familiarity with the EU AI Act and its technical requirements.
• Experience with enterprise risk management frameworks and tools.
• Understanding of threat modelling methodologies and secure development lifecycle (SDLC) principles.

Benefits

• Remote-friendly culture.
• Competitive salaries.
• Strong internal mobility ensuring meaningful growth opportunities.

Company Description

SmartRecruiters is the Recruiting AI Company that transforms hiring for the world’s leading enterprises. Built for global scale, SmartRecruiters delivers an AI-powered hiring platform that automates and optimizes the entire talent acquisition process, ensuring faster and smarter hiring decisions. More than 4,000 companies, including Amazon, Visa, and McDonald's, rely on SmartRecruiters to build winning teams.

Recognized by Fosway Industry Analysts as a strategic leader in recruitment technology for three consecutive years, and awarded by Comparably as a top company for Women, Perks and Benefits, Work-Life Balance, Happiness, Compensation, Diversity, and Culture.