About Appfire
Appfire provides Atlassian apps that help teams collaborate, with a portfolio of more than 200 products used by teams and users worldwide.
Responsibilities
•Coordinate and facilitate Appfire's security governance goals and initiatives
•Support sales channels with prospect and customer security questions, assessments, and audits, including explaining technical controls, alternatives, and risk mitigation
•Conduct vendor risk assessments and follow up on findings
•Support regulatory and compliance initiatives, including ISO 27001, SOC 2, and GDPR
•Identify, document, and track information security policy non-conformities; help develop and monitor corrective action plans
•Identify and track information security risks, assess their impact, and track mitigation plans
•Track information security risk acceptances and exceptions and monitor remediation plans
•Track audit and risk assessment findings related to information security and ensure their timely resolution
•Help monitor business continuity and disaster recovery testing
•Perform periodic compliance checks across the organization
•Support the coordination and execution of integration plans for acquisitions
•Support the annual review and update of information security policies and processes
•Participate in and support annual security awareness campaigns
•Handle sensitive or confidential information with appropriate discretion
•Engage in professional development to maintain and grow relevant skills and knowledge
Requirements
•Bachelor's degree in Computer Science, Information Security, Engineering, a related field, or equivalent experience
•2+ Years of experience in information security risk and/or compliance roles
•Knowledge of common information security frameworks, including CIS, ISO 27001, and SOC 2
•Ability to work effectively in a fast-paced, changing, high-growth environment
•Self-starter who takes initiative, identifies issues and opportunities, and recommends actions
•Creative problem-solving skills
•Excellent interpersonal and communication skills
Nice to have
•Experience with cloud-based security tools, technologies, and controls such as Amazon AWS, Azure, Heroku, and GCP
•CISA, CISSP, or similar security/GRC-focused certifications
Conditions
•Eligible for company equity
•26 paid vacation days annually, regardless of tenure
•12 paid Wellness Days annually, available ad hoc and not carried over month to month
•24 hours of paid volunteer time annually
•3 fully paid volunteering days each year through Appfire Town
•Access to Appfire University, an on-demand learning platform
•Fully covered Luxmed private healthcare plan, with an option to extend coverage to a partner or add upgrades
•Fully paid UNUM life insurance
•MyBenefit Platform allowance of 150 PLN per month for a Multisport card, shopping, restaurants, or entertainment
•Lunch Card allowance of 300 PLN per month for groceries or dining out via a virtual prepaid Pluxee card
•Home office allowance of 200 PLN net per month for electricity and internet costs
