Governance & Compliance Specialist (100% Remote

Rain; Teletrabalho; BRL 120.000 - 150.000; Tempo integral

Resumo da oferta

A fintech company in São Paulo is looking for a Governance & Compliance Specialist to guide compliance with industry certifications such as SOC 2 and ISO. The ideal candidate has over 3 years of experience in GRC projects, strong analytical abilities, and exceptional communication skills. You'll interact with various teams to conduct audits and manage compliance projects, ensuring financial wellness tools are secure for users. This role plays a crucial part in eliminating predatory financial products.

Qualificações

• Strong interpersonal skills and analytical abilities.
• 3+ years of experience with GRC (Governance, Risk, and Compliance) projects.
• Examples of past work will be required.

Responsabilidades

• Conduct projects to obtain certifications such as SOC 2, ISO, PCI DSS.
• Conduct compliance projects and audits with business partners and third parties.
• Provide internal Information Security consultancy on projects.

Conhecimentos

Advanced English speaking, reading, and writing skills

Superior problem solving and troubleshooting skills

Excellent oral and written communication skills

Experience designing, building, and maintaining process documentation

Self-starter with process-oriented mindset

Knowledge of international standards and certifications in information security

Descrição da oferta de emprego

Rain is a venture-backed fintech with a mission to kill predatory financial products like payday loans.

Our first product gives employees instant access to their wages, which solves a major problem for real people (115 million American workers are living paycheck-to-paycheck).

Rain is the fastest-growing startup in the category and was incubated with QED Capital, a top fintech venture fund.

As a Governance & Compliance Specialist you will be challenged to guide the organization on the path to complying with industry certifications such as SOC 2, ISO, GDPR, PCI DSS, etc.

You need to have strong interpersonal skills and analytical abilities.

You will interact with cross-functional teams, therefore being technically competitive with a background in security, risk, and / or compliance is expected.

Key Responsibilities

• Conduct projects to obtain certifications such as SOC 2, ISO, PCI DSS
• Conduct compliance projects and audits with business partners and third parties
• Conduct internal audits to satisfy compliance requirements
• Interact with multiple teams and engage the company as a whole to collect necessary evidence
• Provide internal Information Security consultancy on projects
• Act on initiatives such as risk management, risk assessments, vendor assessments, third‑party assessments, etc.

Key Skills

• Advanced English speaking, reading, and writing skills
• Superior problem solving and troubleshooting skills
• Excellent oral and written communication skills with a keen sense of customer service
• Experience designing, building, and maintaining process documentation
• Process oriented with great documentation skills
• Self‑starter who learns how processes and systems work without being asked
• Ability to adapt information based on the audience, from technical engineering managers to individual contributors to senior executives
• Identification, establishment, and maintenance of risk governance and risk management projects, including risk assessment surveys
• Skills for conducting projects on Data Privacy, Data Protection, and liaising with the Legal team on Privacy matters
• Knowledge of international standards and certifications in information security auditing - ISO, SOC 2 Type 2, GDPR, PCI DSS, etc.

Nice to Have

• Certifications such as ISO Lead Auditor, CISA, CISSP CRISC, among others

Experience

• 3+ years of experience with GRC (Governance, Risk, and Compliance) projects
• Experience in auditing, consulting, and / or risk management
• Experience working in information security related position, with experience in governance, risk and compliance
• Note: Examples of past work will be required as part of the hiring process

The Rain Instant Pay app provides early wage access for employees at mid to large‑sized organizations to improve financial wellness and increase employee productivity.

With 63% of Americans living paycheck to paycheck, financial wellness tools are an important part of any employee benefits package.

Rain works by giving advances on upcoming paychecks; it is not a loan and there is no interest.

Employees pay a small fee for this service, which is healthier than payday loans.

Rain's mission is to regrow financial freedom by giving people full control over their income and to put an end to predatory financial products, replacing them with on‑demand pay.