{"id":4016291,"url":"https://alion.io/job/defined-information-security-analyst-grc-defined-ai","title":"Information Security Analyst - GRC - Defined.ai","company":{"id":10042,"name":"Defined","domain":"defined.ai","url":"https://alion.io/company/defined","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lisbon, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Machine Learning","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"Agile","optional":true}],"status":"live","first_seen_at":"2026-11-10T12:53:09Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-10T18:44:29Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Description\nDefined.ai is a leading provider of high-quality, ethically sourced data for Artificial Intelligence and Machine Learning model training. We host the world's largest AI marketplace and offer end-to-end services to help companies accelerate their AI solutions. Backed by significant funding and recognized globally for our commitment to ethical AI, we operate in a fast-paced, innovative environment with offices in Seattle and Lisbon.\nWe are looking for a Procurement Intern to join our team. Attention to detail, perseverance, and negotiation skills are key for this position. If you also have a desire to learn and develop, this is your opportunity!\nWorking Model: 3 times per week at our offices.\nWhat you'll do:\nJoin our awesome Cybersecurity Team as an Information Security specialist with emphasis in GRC (governance, risk and compliance) to embrace a unique and challenging project;\n\nEnsure security-related activities and processes are aligned with the organization’s strategy and business goals, under the supervision of the Manager of Cybersecurity;\n\nActively participate and contribute to strategic internal initiatives sponsored by the Cybersecurity team regarding information security;\n\nSupport internal/external audit processes and evidence collection initiatives, as well as security-related client inquiries and assessments, while collaborating with key internal teams such as IT, Architecture, DevOps, and Sales / Customer Support.\n\nHelp identify and evaluate relevant international standards, controls, compliance frameworks, and legislation/regulation for the organization, recognizing internal gaps and areas of improvement.\n\nSupport the continuous development of our Integrated Management System (IMS), by participating in the development and implementation of effective security & privacy policies, standards, guidelines, and procedures.\n\nParticipate in the maintenance and continuous improvement of our ISO 27001, 27701, 42001 certifications.\n\nHelp maintain the enterprise Risk Management, Incident Response, and Business Continuity frameworks.\n\nHelp develop and establish an organization wide InfoSec culture by participating in security awareness and personnel training activities.\nWho are we looking for?\nWe’re looking for someone that’s passionate about Information Security and has 3-5 years of experience in similar functions. This person has a few years of experience in these domains and wants to continue growing their knowledge in this field. He or she feels thrilled to embrace a unique challenge on a leading AI company, and is eager to share his/her own experiences and knowledge, as well as learn and collaborate with a team of high-minded cybersecurity professionals. Our chosen candidate is determined and a strong critical thinker and someone that’s passionate and committed to help us achieve our goals.\nRequirements:\n3-5 years of demonstrable experience working in information security either for a known organization with a technological background, a security consulting firm/services provider with equivalent job responsibilities.\n\nAcademic education in Computer Engineering or similar fields of study, mainly in reference universities.\n\nExperience in performing information security assessments, both for internal systems and as part of client inquiries related to sales engagements or ongoing business relationships.\n\nKnowledge of international information security standards and frameworks such as ISO 27001/27002, ISO 17799, NIST 800-53/NIST CSF, CIS Controls, SOC 2.\n\nExperience in developing, maintaining, and enforcing areas of an Information Security & Privacy Management System (ISPMS) within the organization, in light of the ISO 27001/27002 and 27701 standards.\n\nKnowledge of ISO/IEC 22301, and NIST Cybersecurity Framework 2.0, and related management systems and frameworks.\n\nFamiliarity with the AI Governance standards, as ISO 42001.\n\nFamiliarity with relevant legal and regulatory compliance landscapes such as GDPR, CCPA, HIPAA, LGPD, and SOX.\n\nBasic knowledge about cloud-native software architectures, in order to address security aspects in this context (e.g., cloud services, IaaS/PaaS/SaaS models, containers, microservices, modern DevOps toolchain, multi-tenancy aspects).\n\nProfessional certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor or similar are considered a plus.\n\nGood verbal and written communication skills, being able to interact with a wide range of stakeholders whenever required, in a fast-paced organization.\n\nAbility to work in an Agile and dynamic environment.\n\nHave a high level of autonomy, as well as professionalism, responsibility, and personal integrity;\n\nFluency in English, since you will be working in an international environment.\n\nBenefits\nYou spend a lot of your time at work, so it should be challenging, fun and interesting. At Defined.ai it will be all of those things and more. Here’s what we offer:\nFlexible working schedule and hybrid model. We know comfort can boost creativity and performance, so you can manage your schedule and work both from one of our modern office spaces or home.\n\nExcellent career development opportunities in a high growth company. With us, you can accomplish your career goals and follow a well-described career path with the support of your supervisor.\n\nCulture of feedback and continuous improvement. AI is a fast-paced area, so we keep track of tech trends, and we always ask for feedback.\n\nAn international and diverse team. We have more than 23 nationalities at our 3 locations,\nand we provide language classes.\n\nContinuous training opportunities. You can choose from many options: leveraging hand-on workshops, unlimited access to Coursera and formal development opportunities.\n\nWe love to foster a great office vibe. We believe that a comfortable environment makes\na difference, so we provide daily breakfast and lunch, weekly happy hours to unwind,\nextra time-off, and even in-office massages to keep you relaxed and energized.\n\nPrivacy Notice: defined.ai/candidate-privacy-statement","description_format":"text","description_chars":6059,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","AI Training Data & Annotation"],"lifecycle":[{"event":"open","at":"2026-11-10T12:53:09Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["conf:5","win:early"],"computed_at":"2026-11-11T00:13:46Z"},"pay":null,"html_url":"https://alion.io/job/defined-information-security-analyst-grc-defined-ai","json_url":"https://alion.io/job/defined-information-security-analyst-grc-defined-ai.json","meta":{"generated_at":"2026-11-11T00:13:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":625,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":10042},"rest":"https://alion.io/mcp/rest/get_company?id=10042"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdefined-information-security-analyst-grc-defined-ai"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdefined-information-security-analyst-grc-defined-ai"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdefined-information-security-analyst-grc-defined-ai"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/defined-information-security-analyst-grc-defined-ai\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdefined-information-security-analyst-grc-defined-ai"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4016291}},{"tool":"search_jobs","arguments":{"company":"defined.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4016291},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}