About the Role
This position is responsible for managing and enhancing the organization's governance, risk, and compliance (GRC) framework, ensuring alignment with industry regulations, conducting assessments, and supporting internal and external audits.
Responsibilities
- Lead the development and maintenance of security policies and procedures
- Conduct regular risk assessments and maintain risk registers
- Support internal and external audits by providing documentation and evidence
- Ensure compliance with standards such as SOC 2, ISO 27001, and GDPR
- Monitor changes in regulatory requirements and update controls accordingly
- Collaborate with cross-functional teams to implement compliance initiatives
- Track and report on key risk indicators and compliance metrics
- Facilitate security awareness and training programs
- Manage vendor risk assessment processes
- Maintain documentation for security controls and compliance efforts
- Assist in incident response activities related to compliance obligations
- Evaluate third-party security questionnaires and responses
- Develop and refine risk management frameworks
- Provide guidance on compliance matters to technical and non-technical teams
- Participate in business continuity and disaster recovery planning
- Ensure proper classification and handling of sensitive data
- Support certification and attestation processes
- Identify opportunities for automation in GRC processes
- Maintain relationships with external auditors and assessors
- Prepare executive-level reports on compliance posture
Nice to Have
- Certifications such as CISA, CISM, CISSP, or CRISC
- Experience in SaaS or technology-driven service environments
- Prior work with remote teams and distributed organizations
- Hands-on experience with automated compliance tools
- Knowledge of NIST cybersecurity framework
- Experience in fintech or payments-related industries
Compensation
Competitive salary and benefits package
Work Arrangement
Remote with flexible scheduling options
Team
Collaborative team focused on governance, risk, and compliance initiatives
Why Join Us
- Opportunity to shape the evolution of the security program in a growing organization
- Work in a flexible, remote-first environment with a supportive culture
- Engage in meaningful projects that directly impact platform trust and compliance
What We Value
- Integrity and transparency in all security practices
- Proactive problem solving and initiative
- Collaboration across departments to strengthen security posture
Not available
