Junior/Medior Security Compliance Specialist (GRC, Info-Sec)

📋 Description

• Own Third-Party Trust (TPRM): Lead 5–10 vendor security assessments monthly; review SIG questionnaires and evidence.
• Architect Compliance: Lead PCI-DSS and NIS2 audit readiness; translate requirements into tasks.
• Modernize Policy: Update Information Security Policy library to ISO 27001 and NIST.
• Master the Tools: Admin for OneTrust; optimize workflows for seamless compliance.
• Influence Culture: Create security awareness content and phishing simulations via Saba.

🎯 Requirements

• Experience: 1–3+ years in IT Risk, Audit, or GRC (Fintech or ecommerce preferred).
• Technical Literacy: Cloud security AWS/GCP, network controls, vulnerability management.
• Regulatory Fluency: GDPR, PCI-DSS, and NIS2.
• Analytical Skepticism: Look past Yes/No answers to underlying risk.
• The AI Mindset: Use AI tools to automate documentation and research regulatory changes.
• Communication: Fluent English (C1+) with the ability to explain hurdles to non-technical stakeholders.

🎁 Benefits

• Flexible global environment across GMT-6 to GMT+5.
• AI-driven tools to automate risk documentation.
• Autonomy in a security team with global impact.
• Growth opportunities in a fast-moving AI-first company.