Job
Core
Owns the end-to-end governance, risk, and compliance function, building control frameworks, driving audit readiness, and providing security assurance for merchants, partners, and regulators.
Role type
Senior GRC and Security Specialist
Builds
Security control frameworks, audit evidence, risk registers, and compliance policies
Domain
Fintech, payments, and highly regulated financial services
Required skills
GRC framework ownership, audit management (PCI DSS, SOC 2, GDPR), risk assessment and register management, vendor risk management, security policy development, cloud security concepts (AWS/GCP), secure software development practices
Preferred skills
Fintech/payments domain experience, ISO 27001/NIST CSF/800-53 familiarity, enterprise sales security questionnaire support, third-party risk management at scale, cloud security posture management automation
Technologies
AWS, GCP, GRC tooling platforms
Responsibilities
Maintain security control frameworks across PCI DSS, SOC 2, and GDPR; plan and manage internal/external audits; run enterprise risk management and report to CISO; develop and enforce security policies and training programs; lead third-party and vendor security due diligence; respond to customer security questionnaires; partner with Engineering/Product to embed security in SDLC; support incident response and business continuity; monitor regulatory changes and update controls
Seniority
Senior, hands-on IC
