Expert, Information Security
Core
Senior GRC expert defining security governance strategy, control frameworks, and risk/compliance decisions in a regulated fintech environment.
Role type
Senior individual contributor GRC expert
Builds
Security governance strategy, control frameworks, audit responses, and risk narratives
Domain
Fintech / Information Security
Required skills
GRC strategy, regulatory compliance, audit leadership, risk management, ISO 27001, DORA, third-party risk, security control assurance
Preferred skills
Cloud security, IAM, SDLC governance, incident management, vulnerability management
Technologies
ISO 27001, DORA, SOC 2, NIST CSF, BaIT, COBIT
Responsibilities
Define multi-year GRC roadmap aligned to business strategy; Advise leadership on material risk decisions; Lead major audits and regulatory examinations; Own domain SME ownership for ISMS/DORA/third-party risk; Set standards and mentor specialists
Seniority
Senior, hands-on IC