Senior Information Security Engineer

SmartRecruiters Inc. delivers an AI-powered hiring platform used by over 4,000 companies including LinkedIn, McDonald's, VISA, CD Projekt Red, and Allegro. In 2025, SmartRecruiters joined SAP to accelerate AI innovation in hiring. The R&D structure is based on empowered product teams responsible for business outcomes and autonomy.

• 5+ years of experience in information security, governance, risk, and compliance with a technical orientation
• Demonstrated compliance or auditing experience with major frameworks
• Solid understanding of controls auditing principles and evidence management
• Knowledge of risk management methodologies and conducting risk assessments
• Ability to manage multiple complex projects independently
• Ability to investigate, interpret IT security and compliance issues at governance and technical levels
• Strong understanding of technology, cloud-based products, and SaaS environments
• Experience working across business units and geographies engaging engineering, business, and operational teams
• Experience with ISO 27001
• Excellent written and verbal communication skills in English

Nice to have:

• Professional certifications such as CISA, CRISC, CISM, CISSP, CCSK, CCSP
• Experience with ISO 9001, 27017, and 27018
• Experience with ISO 22301 including BIA, BCP/DRP, and recovery testing
• Experience with BSI C5 or similar cloud compliance frameworks
• Knowledge of AI security principles and familiarity with EU AI Act
• Technical understanding of cloud infrastructure (AWS preferred), networking, identity management, and SaaS security
• Experience with enterprise risk management frameworks and tools
• Understanding of threat modeling and secure development lifecycle (SDLC)
• Hands-on experience with incident response and security investigations

Governance, Risk & Compliance:

• Identify manual, repetitive GRC processes and design automation blueprints for evidence collection, control monitoring, access reviews, policy enforcement, and compliance reporting
• Build and maintain automated workflows using compliance platforms, scripting, or integration tools
• Develop reusable templates, playbooks, and standardized blueprints for recurring GRC activities
• Collaborate with engineering and IT teams to integrate security and compliance checks into toolchains and CI/CD pipelines
• Continuously evaluate and improve GRC tooling, data flows, and reporting
• Manage stakeholder expectations and partner with internal teams for IT risk and compliance obligations
• Maintain regional and local stakeholder relationships and documentation
• Support SOC 2 Type II framework maintenance including evidence collection and audit support
• Manage ISO 27001 and ISO 22301 audit lifecycles and coordinate improvements
• Support ISO 42001 framework maintenance aligned with the EU AI Act
• Support vendor risk management and third-party security assessments

Business Continuity & ISO 22301:

• Serve as subject matter expert or contributor for Business Continuity Management System (BCMS)
• Support Business Impact Analysis, BCP/DRP development, recovery exercises, and continuity metrics

AI Security & Compliance:

• Support assessment of AI-related risks and regulatory readiness under the EU AI Act
• Collaborate with product and engineering teams to evaluate security controls for AI/ML features and services

SmartRecruiters is an Equal Employment Opportunity employer and complies with applicable anti-discrimination laws. Personal data is processed according to applicable regulations. Mandatory personal data is required under Polish labor law; refusal may prevent recruitment. Data is processed for recruitment and potential future processes until consent is withdrawn.