As a Senior Governance, Risk and Compliance (GRC) Analyst, you will establish risk and compliance programs, focusing on automation and repeatability, particularly for PCI DSS and SOC 2 Type 2. You will manage third-party cybersecurity risks, vulnerability management, and phishing programs, while collaborating with engineers to triage vulnerabilities. You'll maintain security policies and advise leadership on risk management strategies, ensuring broad security awareness and supporting tech compliance requirements.
Job listings
We are seeking a detail-oriented and proactive Risk & Compliance Specialist with 3–5 years of experience to support our organization’s compliance initiatives related to SOX and PCI DSS. This role is critical in helping ensure our control environment remains compliant, effective, and audit-ready, while supporting risk reduction across financial and payment systems.