Principal Security Compliance Analyst

Location: Poland | Remote

The Principal Security Compliance GRC Analyst is responsible for designing, implementing, and maintaining a comprehensive International Organization for Standardization (ISO) governance and certification program. This role serves as the organization's lead subject matter expert for ISO standards and Integrated Management System (IMS) practices, establishing a scalable framework that supports multiple certifications, business units, products, and geographic regions. This role drives continual improvement, governance maturity, audit readiness, and strategic expansion of the ISO program while ensuring alignment with business objectives, customer expectations, and regulatory requirements.

Your Role Responsibilities — Here's What You'll Do

• Develop and own a strategic vision, roadmap, and maturity model for Hyland's enterprise ISO governance and certification program, architecting governance controls that support an Integrated Management System (IMS) spanning multiple certifications, product lines, and business units at enterprise scale.
• Lead certification and surveillance audit activities, including audit planning, evidence management, corrective action tracking, and certification maintenance, while partnering with external auditors and assessors to manage audit schedules, findings, and corrective action plans.
• Drive the expansion of ISO scope and advanced certifications such as TISAX and C5, identifying requirements, building organizational capability, and coordinating implementation across teams.
• Establish governance models and control ownership across teams, translating ISO requirements into actionable control implementations that are embedded in business processes rather than existing as documentation-only artifacts.
• Establish metrics, dashboards, and reporting for ISO program health, including IMS objectives, control effectiveness, evidence completeness, and audit readiness, advising leadership on compliance implications of strategic decisions.
• Provide leadership and mentorship to compliance specialists, collaborating with product, engineering, legal, and HR teams to integrate ISO requirements into business operations and ensure compliance is built into processes.

Role Essentials

• 8+ years of progressive experience in information security compliance, including at least 5 years as a primary owner or lead of ISO certification programs.
• Deep hands-on expertise in ISO/IEC 27001, 27002, 27017, 27018  and 27701 (privacy), with demonstrated experience implementing controls across multiple product lines and business units.
• Direct experience with ISO 42001 (AI governance) implementation or equivalent AI security governance frameworks.
• Proven track record of building and scaling compliance programs, with experience mentoring and developing compliance teams.
• Strong understanding of SaaS, cloud infrastructure, and product security models, with excellent data analysis skills using tools such as Excel, SQL, or statistical software packages.

What We'd Like to See

• Certifications such as CISSP, CISA, CCAK, ISO 27001 LA, LI, IA, or equivalent, and experience with TISAX and C5 certifications.
• Exceptional ability to translate technical security controls into business language, build stakeholder alignment, and influence, motivate, and mobilize team members and business partners.
• Excellent critical thinking, analytical, and problem-solving skills, with the ability to use original thinking to translate goals into innovative ideas and design solutions.
• Excellent oral and written communication skills with executive presence, and the ability to develop and deliver engaging, informative, and compelling presentations.
• Excellent organizational, facilitation, and project management skills, with the ability to thrive in a fast-paced, deadline-driven environment while handling sensitive information with discretion and tact.

Pay Transparency

336,875 – 350,163 PLN gross annually based on contract of employment (umowa o pracę)
The posted pay range represents the company’s good faith estimate for this role. Actual compensation may differ based on relevant experience, skills, education, and work 

About Hyland

Hyland is the pioneer of the Content Innovation Cloud™, delivering ubiquitous enterprise intelligence to organizations with solutions that unlock actionable insights and drive automation. © Hyland. All rights reserved.

Trusted by thousands of organizations worldwide, including many of the Fortune 100, Hyland's solutions create the foundation for a connected, agentic enterprise, where teams harness the power of AI to redefine how they operate and engage with those they serve. For additional information on Hyland's platform and services, please visit Hyland.com.

#HylandLife

Since 1991, it has been Hyland's mission to help our employees, customers and partners exceed their potential with our industry-leading content services platform. Our employees exude a contagious energy and are passionate about what they do – whether it's helping customers succeed, raising up their fellow Hylanders, or engaging in the communities where they live and work.

The #HylandLife hashtag encompasses our employee-centric culture. Our employees live our culture day in and day out by bringing their best self to work. Hyland supports them to do just that through career development resources, wellbeing programs and innovation practices. We thrive on diverse viewpoints and new ideas and believe that a positive, inclusive workplace is imperative to sustainable success.

As we've grown to a company of nearly 4,000 strong, we have the opportunity to make a significant impact on our communities. We strongly support employee initiatives and align our giving campaigns and programs to organizations that are important to them.

Equal Opportunity Statement

Hyland is an equal opportunity employer. We value diversity and are committed to providing an inclusive workplace for all employees and applicants. Employment decisions are made without regard to any characteristic protected by applicable laws and regulations. Information collected during the hiring process is used solely to assess qualifications, verify identity, and comply with legal requirements.