Job
Core
Design and own the enterprise security governance, risk, and compliance (GRC) framework for a global fintech regulated across five jurisdictions.
Role type
Senior Security Architect (GRC & Regulatory Compliance)
Builds
Enterprise security GRC framework, regulatory compliance mapping, and security awareness architecture
Domain
Fintech, Cybersecurity, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise security GRC framework design, Regulatory compliance mapping (DORA, NIS2, ISO 27001, PCI-DSS), Multi-jurisdiction compliance management, C-suite advisory, Security risk assessment, Human-risk philosophy definition, Third-party risk management oversight, Business continuity security integration
Preferred skills
Regulated financial services experience, Direct FCA or CySEC exposure, TPRM program design, Business Continuity Management, Security awareness program scaling
Technologies
ISO 27001, PCI-DSS, DORA, NIS2
Responsibilities
Own the enterprise security GRC framework including policy hierarchy and audit evidence structure; Map controls to DORA, NIS2, ISO 27001, and PCI-DSS to identify gaps; Act as final authority on regulatory interpretation for audits; Manage compliance obligations across five jurisdictions (FCA, CySEC, ASIC, SCB, SCA); Represent the company in regulatory discussions; Define human-risk philosophy and security awareness architecture; Advise CISO, CHRO, Risk, and Compliance teams on security risk and regulatory obligations; Set architectural standards for the Corporate Security team; Support Third-Party Risk Management and Business Continuity from a security perspective
Seniority
Senior, high-visibility IC
