Senior GRC Specialist: ISO 27001, GDPR & PCI | Remote

payabl.; Polska; Remote; PLN 393,000 - 481,000; Full time

Benefits offered by this job

Learning and development budget

Company celebrations

Global events and collaboration

Job summary

payabl. is seeking a Senior GRC Specialist to mature our information security governance, risk and compliance framework for a multi-entity payments group.

You will develop and operate policies, risk registers, and evidence libraries to stay audit-ready across ISO 27001-aligned governance, DORA, GDPR, PCI DSS and resilience requirements. In a remote-friendly, multinational environment, you will coordinate audits, manage third‑party risk, and contribute to AI governance initiatives, while

Qualifications

• 3+ years of experience in GRC, information security governance, IT audit, or IT risk management.
• Working knowledge of ISO/IEC 27001; exposure to DORA, GDPR or PCI DSS.
• Experience in regulated financial services or advisory work for such companies.
• Hands-on audits coordination, evidence prep and remediation.
• Familiarity with GRC platforms or a passion for compliance automation.
• Excellent written English for auditors, regulators and stakeholders.
• Ability to manage multiple workstreams to fixed deadlines.
• Certifications such as CISA, CRISC, CISM, CIPP/E or ISO 27001 Lead Auditor/Lead Implementer is a plus.

Responsibilities

• Develop, maintain and improve information security policies and standards aligned with ISO 27001.
• Manage full policy lifecycle including approvals, reviews and version control.
• Maintain the information security risk register and track remediation actions.
• Prepare risk reports for management and governance committees.
• Support compliance activities under DORA, PSD2/EBA guidelines, GDPR and PCI DSS.
• Contribute to operational resilience activities for UK FCA compliance.
• Manage third-party risk lifecycle including due diligence and questionnaires.
• Maintain vendor register and contractual security requirements with Legal.
• Coordinate internal and external audits and audit calendars.
• Own evidence collection and maintain an evidence library for audits.
• Administer and develop the GRC platform with automated evidence collection.
• Apply AI tools to GRC activities and support AI governance efforts.

Skills

GRC governance

ISO/IEC 27001

Audits coordination

Strong written English

Education

CISA

CISM

CRISC

ISO 27001 Lead Auditor/Lead Implementer

Tools

Vanta

ServiceNow GRC

OneTrust

Job description

payabl. is seeking a Senior GRC Specialist to mature our information security governance, risk and compliance framework for a multi-entity payments group.

You will develop and operate policies, risk registers, and evidence libraries to stay audit-ready across ISO 27001-aligned governance, DORA, GDPR, PCI DSS and resilience requirements. In a remote-friendly, multinational environment, you will coordinate audits, manage third‑party risk, and contribute to AI governance initiatives, while