Security GRC Specialist - Remote

Overview

This role is responsible for managing internal security GRC (Governance, Risk, and Compliance) programs, collaborating with Security, IT, and corporate teams to identify and reduce cybersecurity risks.

In Short

• Develop, implement, and improve cybersecurity and third-party risk management frameworks.
• Identify, assess, and mitigate cybersecurity risks; conduct gap analyses and internal security reviews.
• Support IT compliance, audits, and regulatory requests; manage related documentation and reporting.
• Collaborate on vendor assessments, contract reviews, and AI safety/security initiatives.
• Contribute to business continuity, disaster recovery, and data governance planning.
• Maintain and improve security policies, standards, and awareness programs (incl. phishing simulations).
• Assess new systems/applications from a security perspective; integrate security tools into GRC workflows.
• Automate compliance monitoring, access control reviews, and IAM processes.

Requirements

• Experience in Governance, Risk, and Compliance in cybersecurity.
• Strong understanding of cybersecurity frameworks and risk management.
• Ability to collaborate with cross-functional teams.
• Experience with IT compliance and regulatory audits.
• Knowledge of data governance and business continuity planning.
• Familiarity with vendor assessment processes.
• Strong analytical and problem-solving skills.

Benefits

• Opportunity to work in a dynamic fintech environment.
• Career development and training opportunities.
• Collaborative and innovative team culture.
• Participation in exciting projects related to cybersecurity.