Hoxhunt
Junior Security Engineer, GRC
Helsinki, Finland· HYBRID
About the role
The role manages security questionnaires and RFP responses and supports continuous compliance for SOC 2 Type II, ISO 27001, ISO 42001 and HIPAA. It also coordinates vulnerability remediation tracking, pentest scheduling, access reviews and audit support, and drives control automation. Hybrid with 2–3 office days per week.
What you will do
- Own security questionnaires and RFP responses end to end
- Support continuous compliance (SOC 2, ISO 27001, ISO 42001, HIPAA)
- Coordinate vulnerability management review and remediation tracking
- Schedule pentests, access reviews and policy cycles
- Prepare compliance reporting and audit support
What they ask for
- Pursuing or completed a Bachelor's or Master's degree in a relevant field
- Strong written English and attention to detail
- Project management and stakeholder coordination skills
- Knowledge of compliance frameworks and security controls, or willingness to learn
- Comfort using AI tools
- Hybrid: 2–3 days per week in the Helsinki office
Nice to have
- GRC tools such as Vanta, Drata, Loopio or Hyperproof
- Compliance, audit or technical writing experience
- Python or Shell scripting
- CVSS and vulnerability management exposure
What applying with Rooted means
This role accepts applications with Rooted context. Instead of sending only a resume, you can attach a verifiable credential with your proofs, rank, and technical evidence.
Your application includes your Rooted credential: rank, verified proofs, and supporting evidence.
You can read this role without an account. To apply you need a Rooted credential.
This role is curated by Rooted. Rooted is not the hiring company unless explicitly stated. The hiring company is Hoxhunt. Confirm the final details with the original source or during the application process.
Posted 2026-09-02