Specialist, Information Security
Core
Own and mature Governance, Risk, and Compliance (GRC) programs in a regulated fintech environment, driving control design, operationalization, testing, and continuous improvement.
Role type
Senior GRC Specialist (Information Security)
Builds
Scalable security governance processes, audit-ready documentation, and risk management frameworks for a global fintech platform.
Domain
Fintech / Cybersecurity Governance
Deliverable
dashboards & analysis
Required skills
GRC program ownership, ISO 27001/ISMS, audit coordination, risk management, third-party risk management, control testing, regulatory mapping
Preferred skills
Automation of control testing, stakeholder influence, leadership in risk assessments
Technologies
ISO 27001, ISMS, TPRM, BCM, IAM, SDLC governance, vulnerability management, logging/monitoring
Responsibilities
Own GRC domains (ISO 27001, audit, TPRM, risk governance); coordinate internal and external audits; facilitate risk assessments and drive treatment plans; lead third-party vendor due diligence; design and run risk-based control testing plans.
Seniority
Mid-to-Senior, hands-on IC