This is a full-time and fully remote position from Portugal only
Axonius is seeking a Cybersecurity Assurance Senior Analyst based to lead security audit, assurance, and Governance, Risk, and Compliance (GRC) efforts. Reporting to the Director of Cybersecurity Assurance/GRC, this role manages cybersecurity governance, risk management, and compliance across the organization and with third-party vendors. The position focuses on conducting comprehensive security assessments, managing vendor risk, and driving the continuous improvement of the GRC program to support the company's technology platform.
Responsibilities
- Conduct comprehensive internal and external security compliance assessments, identify cybersecurity vulnerabilities, and maintain the organizational risk register.
- Manage internal and external audits by preparing compliance documentation, maintaining the audit repository, and tracking remediation findings.
- Coordinate quarterly meetings with risk and control owners to review mitigation plans, evaluate control effectiveness, and report on quarter-over-quarter performance metrics.
- Administer GRC and procurement platforms, and support customer pre-sales and renewals by completing cybersecurity assurance documentation within RFPIO.
Minimum Qualifications
- 5+ years of combined experience in Cybersecurity Risk, Vendor Risk, Enterprise Risk, IT System Administration, or IT Auditing.
- Professional proficiency in English, including reading, writing, and speaking, to document processes and collaborate with US-based teams.
- Core implementation and assessment experience with compliance standards and frameworks such as SOC 2, ISO 27001, ISO 22301, ISO 42001, or HIPAA.
- Experience applying third-party risk management (TPRM) frameworks to execute vendor security assessments.
Preferred Qualifications
•
- Technical experience in independently coordinating, executing, and documenting business continuity or disaster recovery testing scenarios.
- Experience automating GRC processes using platforms such as Fusion RM, Zip, Anecdotes, or Vanta.
- Professional certifications or working knowledge related to NIST, ISO 31000, or ISO 42001 frameworks.
- Experience utilizing ticketing platforms to track and manage cybersecurity vulnerabilities.
- Technical familiarity with security controls and technologies used for securing SaaS environments.
- Proficiency in navigating and utilizing Google Products (Docs, Sheets, Forms, Slides) for data collection and reporting.
#LI-REMOTE#LI-AZ1
About Axonius:
Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.
Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.
Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius .
At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.
Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF) . By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.