GRC Security Specialist

Payoneer Inc.; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Payoneer Inc. is seeking a GRC Security Specialist to join the Cyber GRC Team. You will shape policies, manage compliance programs, and align security with regulatory standards across global operations.

You will collaborate with Legal and IT to implement data protection and security awareness initiatives, while guiding audits and risk assessments to protect users worldwide.

Qualifications

• 3+ years in GRC, info security, or compliance within SaaS/cloud/enterprise IT environments.
• Strong understanding of SOC 2, PCI-DSS, NIST, and cloud security standards.
• Knowledge/experience in AI Governance (AI risk mgmt, ethical AI, EU AI Act, NIST AI RMF, ISO/IEC 42001).
• Strong SDLC knowledge.
• Strong IT systems and security controls knowledge.
• Experience with security risk assessments and working with auditors/regulatory bodies.
• Strong project management for multiple compliance initiatives.
• Experience collaborating with IT and business stakeholders to improve security.
• Excellent communication and collaboration; translate requirements into actionable processes.
• Ability to interface with technical staff and senior management.
• Proficiency in English and Hebrew, written and spoken.
• Excellent teamwork and interpersonal communication abilities.

Responsibilities

• Directly responsible for policies, procedures, and controls to meet regulatory, legal, audit, and best-practice requirements.
• Develop cyber security compliance strategy; ensure contractual/regulatory compliance.
• Identify regulatory, legislative, industry requirements; define controls to meet them.
• Conduct periodic internal reviews or audits to ensure compliance.
• Oversee/evaluate compliance systems to ensure effectiveness.
• Compile/present reports to management on compliance activities.
• Stay updated on regulatory trends and industry developments.
• Design/implement enhancements in compliance communication, monitoring, enforcement.
• Develop/execute a company-wide compliance awareness program.
• Partner with Legal and IT on data protection agreements and initiatives.
• Lead company-wide security awareness/training initiatives.
• Assist in incident response planning and investigations.

Skills

GRC

Information security

Compliance

SOC 2

PCI-DSS

NIST

AI Governance

SDLC

IT security

Project management

English

Hebrew

Communication

Auditing

Stakeholders

Job description

About Payoneer

Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories.

By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence.

Role summary

Cyber Security Governance protects the security of an organization’s information systems and data by setting policies, monitoring compliance, and following defined procedures to identify, assess, and manage risks from external and internal threats. We are seeking a GRC Security Specialist to join our Cyber GRC Team in Payoneer. You will be joining a tight-knit and highly respected team of GRC experts who are central to Payoneer's security strategy. In this role, you will be at the heart of protecting our global financial platform, directly influencing the trust and safety of millions of users worldwide. As a GRC Security Specialist, you will be responsible for the following:

Glilot, Israel
Hybrid
Full-time

What you'll do

• Directly responsible for policies, procedures, and controls to assure compliance with applicable regulatory, legal, and audit requirements as well as good business practices.
• Develop a Cyber security compliance strategy and approach and ensure compliance with contractual requirements and globally recognized standards and guidelines.
• Identify regulatory, legislative, and industry-specific compliance requirements and define controls that can be used to meet those requirements.
• Conduct and participate in periodic internal reviews or audits to ensure that compliance procedures are followed.
• Oversee and evaluate compliance systems to ensure they function effectively.
• Compile and present reports to management on compliance activities and progress.
• Stay updated on industry developments, regulatory trends, and best practices to evaluate their potential impact on the organization.
• Design and implement enhancements in compliance communication, monitoring, and enforcement mechanisms.
• Develop and execute a compliance awareness program, including the creation and distribution of materials for all employees.
• Partner with Legal and IT teams to manage data protection agreements and compliance initiatives.
• Lead the development and execution of company-wide security awareness and training initiatives.
• Assist in incident response planning and investigations when necessary.

Who you are

• 3+ years of experience in GRC, information security, or compliance within SaaS, cloud, or enterprise IT environments.
• Strong understanding of regulatory frameworks and security standards such as SOC 2, PCI-DSS, NIST, and cloud security frameworks.
• Knowledge and experience in AI Governance, including AI risk management, ethical AI principles, and alignment with frameworks such as EU AI Act, NIST AI RMF, and ISO/IEC 42001.
• Strong knowledge of SDLC methodology.
• Strong knowledge of IT systems and security controls.
• Experience conducting security risk assessments and working with auditors or regulatory bodies.
• Strong project management skills with the ability to manage multiple compliance initiatives.
• Experience working with IT teams and business stakeholders to enhance security measures.
• Excellent communication and collaboration skills, with the ability to translate compliance requirements into actionable business processes.
• Ability to effectively interface with technical staff and senior management.
• Proficiency in English and Hebrew, both written and spoken, to effectively communicate with local and global teams and stakeholders.
• Excellent teamwork and interpersonal communication abilities

Advantage

• Certifications such as CISM, CISA, CISSP.
• CISO certification from a recognized institution.
• Master’s degree in information security, Business Administration, or related field.
• Experience in the fintech or financial services industry.

Act as our customer’s partner on the inside

Learning what they need and creating what will help them go further.

Do it. Own it.

Being fearlessly accountable in everything we do.

Continuously improve

Always striving for a higher standard than our last.

Build each other up

Helping each other grow, as professionals and people.

We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case‑by‑case basis.