Technical Governance Risk & Compliance Specialist
Core
Lead the Technology GRC programme, maintaining overall compliance posture, centralizing risk views, and integrating GRC priorities into the core Technology roadmap.
Role type
Senior IC Technology Governance Risk & Compliance Lead
Builds
Centralized risk registers, control frameworks, audit evidence pipelines, and automated compliance monitoring
Domain
Fintech / Financial Services / Cybersecurity
Required skills
IT/Cybersecurity GRC program management, IT General Controls (ITGCs), Cloud security (AWS/GCP/Azure), IAM, CI/CD pipelines, Secure SDLC, Executive reporting, Stakeholder management, Policy governance, Third-party risk management
Preferred skills
Modern GRC platforms (AuditBoard), Regulatory frameworks (DORA, PCI DSS, SOC 2), Automated compliance monitoring, Industry certifications (CISA, CRISC, CISM, ISO 27001 Lead Auditor)
Technologies
AuditBoard, AWS, GCP, Azure
Responsibilities
Drive Technology's compliance posture and establish a single source of truth for technology risk metrics; Manage and triage incoming audit, risk, and compliance inquiries; Administer the Technology risk register in AuditBoard; Represent Technology at risk committees delivering data-driven reporting; Lead internal and external audits end-to-end; Enforce agreed remediation timelines across engineering teams; Align and define the Technology control framework against industry standards (ISO 27001, NIST, CIS); Author, update, and manage the approval lifecycle for Technology policies; Translate findings into concrete deliverables within the Technology product and engineering backlogs; Lead security and risk evaluations for technology vendors and define mandatory security clauses.
Seniority
Senior, hands-on IC