Information Security GRC Specialist - Customer Trust

HireRight is the premier global background screening and workforce solutions provider. We bring clarity and confidence to vetting and hiring decisions through integrated, tailored solutions, driving a higher standard of accuracy in everything we do. Combining in-house talent, personalized services, and proprietary technology, we ensure the best candidate experience possible. PBSA accredited and based in Nashville, TN, we offer expertise from our regional centers across 200 countries and territories in The Americas, Europe, Asia, and the Middle East. Our commitment to get it right every time, everywhere, makes us the trusted partner of businesses and organizations worldwide.

This role reports to the Sr. Manager of Information Security GRC and is responsible for supporting the organization's Customer Trust program. The GRC Customer Trust Specialist helps manage information security compliance, risk management, third-party assurance activities, and governance processes that support customer-facing security and compliance commitments.

This position serves as a key liaison between Information Security, internal stakeholders, customers, and external partners by facilitating security assessments, responding to customer due diligence requests, coordinating audits, and maintaining documentation that demonstrates the organization's security posture. The role also assists with compliance monitoring, risk identification, remediation tracking, and process improvement initiatives to ensure continued alignment with internal policies, regulatory requirements, and industry standards.

Model of work: Hybrid (Katowice office)

• Lead customer-facing security activities, including security questionnaires, risk assessments, audits, project security reviews, and remediation tracking.
• Respond to customer requests for security, compliance, and privacy information by coordinating evidence collection and communicating the organization's security posture.
• Serve as the primary liaison for customer trust engagements, leveraging established procedures to manage assessments, audits, and due diligence requests.
• Evaluate customer security requests, identify opportunities for improvement, and communicate recommendations to management and key stakeholders.
• Partner with business units and cross-functional teams to support customer requirements and ensure timely completion of security and compliance deliverables.
• Review corrective action plans and advise stakeholders on remediation strategies for compliance gaps, audit findings, and identified vulnerabilities.
• Continuously enhance customer trust processes, documentation, and knowledge resources.
• Perform additional compliance, governance, and risk-related duties as assigned.

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field.
• 3-5 years of experience supporting Information Security, GRC, or Customer Trust functions, including customer security questionnaires, audits, assessments, and customer-facing security programs.
• Working knowledge of information security and privacy frameworks such as ISO 27001, SOC 2, GDPR, FCRA, or similar regulatory and compliance standards.
• Experience supporting third-party assurance activities; familiarity with Conveyor, CAIQ, HECVAT, SIG, or similar assessment frameworks is a plus.
• Experience managing customer trust portals and security knowledge repositories is preferred.
• Relevant certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are preferred.
• Strong project management and organizational skills; Jira experience is a plus.
• Familiarity with core IT infrastructure, cloud technologies, and information security concepts.
• Excellent customer service, relationship management, written, and verbal communication skills.
• Self-motivated professional with strong analytical abilities, attention to detail, and the ability to work independently while collaborating effectively across teams.
• English proficiency required, as the role involves frequent customer-facing interactions and communications.

HireRight offers its employees a permanent contract and a comprehensive package of benefits. From day one you will receive a training plan to get you on board quickly. Additionally, we offer:

• Private Medical Care
• Edenred card
• Lunch Vouchers
• Paid Lunch Break (30 Minutes)
• Social Fund (Holiday Allowance, Glasses Voucher)
• Bonus Plans
• Group Life Insurance
• Career Path & Opportunities to Grow
• Professional Training

Please submit resume/CV in English.

All resumes are held in confidence. Only candidates whose profiles closely match requirements will be contacted during this search.

HireRight does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of HireRight and HireRight will not be obligated to pay a placement fee.