Junior Information Security Specialist
Core
Support audit readiness, PCI DSS and ISO/IEC 27001 activities, ISMS documentation, BCP/DR testing, and third-party security questionnaires.
Role type
Junior Information Security Specialist (GRC)
Builds
Security documentation, compliance evidence, risk registers, and approved questionnaire libraries.
Domain
Fintech / Payments / Information Security
Deliverable
dashboards & analysis
Required skills
Information Security fundamentals, PCI DSS knowledge, ISO/IEC 27001 knowledge, audit support, risk register management, third-party questionnaire completion
Preferred skills
IT audit experience, GRC tools familiarity, regulatory framework awareness (NIS2, DORA), entry-level security certifications
Technologies
Jira, compliance platforms, audit trackers
Responsibilities
Review compliance evidence for PCI DSS and ISO/IEC 27001 alignment, support external audits by preparing documentation and coordinating teams, maintain security policies and control mappings, participate in BCP/DR plan testing, track risk registers and remediation deadlines, complete third-party security questionnaires
Seniority
Junior, mentored IC