Remote GRC Lead: PCI/SOX, AI-Driven Compliance

Subsplash; United States; On-site; USD 95,000 - 105,000; Full time

Benefits offered by this job

Generous paid time off

Medical, dental, vision coverage

401(k) matching

Professional development

Parental leave

Job summary

Subsplash is seeking a Senior GRC Analyst to lead security and risk operations while integrating people, policy, and technology. This remote role involves identifying security gaps, implementing best practices, and advancing AI tools for compliance.

Qualified candidates will have 3–5 years of GRC or InfoSec experience, knowledge of PCI DSS, and skills in data mapping. Benefits include generous paid time off, medical coverage, and a family-friendly culture.

Qualifications

• 3–5 years of GRC, InfoSec, or audit experience, ideally in FinTech or Financial Services.
• Knowledge of PCI DSS requirements and Data Mapping.
• Experience with phishing platforms and IAM expertise.

Responsibilities

• Lead PCI DSS audits and support internal audit on IT SOX controls.
• Maintain data inventory and flow diagrams for PII and PCI.
• Implement controls across PCI DSS, NIST CSF.

Skills

GRC, InfoSec, or audit experience

Knowledge of PCI DSS requirements

Data Mapping and RoPA experience

Phishing platform management

IAM expertise

GRC platform administration

SOX ITGC experience

Use of AI for GRC automation

Job description

Subsplash is seeking a Senior GRC Analyst to lead security and risk operations while integrating people, policy, and technology. This remote role involves identifying security gaps, implementing best practices, and advancing AI tools for compliance.

Qualified candidates will have 3–5 years of GRC or InfoSec experience, knowledge of PCI DSS, and skills in data mapping. Benefits include generous paid time off, medical coverage, and a family-friendly culture.