Senior Specialist, Information Security
Core
Lead and scale major elements of security governance in a regulated fintech environment, owning complex GRC domains and acting as a trusted advisor to senior stakeholders.
Role type
Senior Information Security GRC Specialist
Builds
Security governance frameworks, risk treatment plans, audit programs, and third-party risk oversight for a crypto/fintech platform.
Domain
Fintech / Cybersecurity / GRC
Required skills
GRC strategy, ISMS/ISO 27001, DORA, risk management, audit leadership, third-party risk management, control testing, stakeholder communication
Preferred skills
SOC 2, PCI DSS, NIST, cloud security, IAM, SDLC governance, incident management, vulnerability management
Technologies
ISO 27001, DORA, SOC 2, PCI DSS, NIST
Responsibilities
Own and evolve GRC domains end-to-end including strategy, annual plans, and success metrics; Facilitate high-impact risk assessments for new products and architectural changes; Lead complex audits and assessments including readiness and remediation; Set due diligence and monitoring requirements for critical suppliers; Mentor specialists and set quality standards for documentation and stakeholder engagement
Seniority
Senior, hands-on IC