Senior GRC Engineer — AI-Driven Compliance & Risk (Remote)

payabl.; Warszawa; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Provident Fund

Annual Learning Budget

€150 Wolt allowance

SportsBenefits membership

Company car after year

Parking

25 days vacation

Local discount card

Language classes

Global company events

Job summary

payabl. is seeking a Senior GRC Specialist to strengthen our information security governance, risk and compliance across multiple entities.

You will build and run programs, work with a modern GRC platform, and apply AI to automate repetitive tasks, including policy drafting and evidence collection. You will coordinate audits, maintain risk registers, and ensure compliance with ISO 27001, DORA, GDPR, PCI DSS and FCA-related resilience requirements for our entities, including a UK presence.

Qualifications

• 3+ years of experience in GRC, information security governance, IT audit or IT risk management.
• Working knowledge of ISO/IEC 27001; exposure to DORA, GDPR or PCI DSS.
• Experience in regulated financial services (payments, e-money, banking, fintech) or advisory work for such companies.
• Hands-on experience with audits and remediation.
• Familiarity with GRC platforms or a strong interest in compliance automation.
• Strong written English suitable for auditors and regulators.

Responsibilities

• Governance & Policy Management: develop and maintain information security policies aligned with ISO 27001.
• Operate the policy lifecycle with approval workflows, reviews, ownership and version control.
• Risk Management: maintain risk registers, track remediation to closure.
• Regulatory Compliance: support DORA, PSD2/EBA, GDPR and PCI DSS compliance.
• Third-Party & Vendor Risk: manage due diligence, risk rating, onboarding gates and reassessment.
• Audit & Assurance: coordinate audits and maintain evidence library.
• GRC Platform, AI & Automation: administer the GRC platform and apply AI tooling to automate processes.

Skills

GRC governance

ISO 27001

Regulatory compliance

Risk management

Audit coordination

English proficiency

Education

CISA/CRISC/CISM

Tools

GRC platforms (Vanta/ServiceNow OneTrust)

Job description

payabl. is seeking a Senior GRC Specialist to strengthen our information security governance, risk and compliance across multiple entities.

You will build and run programs, work with a modern GRC platform, and apply AI to automate repetitive tasks, including policy drafting and evidence collection. You will coordinate audits, maintain risk registers, and ensure compliance with ISO 27001, DORA, GDPR, PCI DSS and FCA-related resilience requirements for our entities, including a UK presence.