Senior GRC & Compliance Leader - AI-Driven in Payments

payabl.; United States; Híbrido; USD 78 000 - 123 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Annual Learning Budget

Resumo da oferta

payabl. is seeking a Senior GRC Specialist to mature governance, risk and compliance across ISO 27001, DORA, GDPR and PCI DSS. You will own policies, risk registers, and audit readiness for a multi-entity payments group, with hands-on program delivery and AI-enabled automation.

You will manage third-party risk, support FCA-regulated activity for the UK entity, and coordinate Big Four ICT audits with a modern GRC platform, while steering the AI governance program and vendor assessments.

Qualificações

• 3+ years in GRC, information security governance, IT audit or IT risk management.
• Working knowledge of ISO/IEC 27001; exposure to DORA, GDPR or PCI DSS.
• Experience in regulated financial services or advisory work for such companies.
• Hands-on experience coordinating audits and producing evidence for findings.
• Familiarity with GRC platforms or strong interest in compliance automation.
• Strong written English, suitable for auditors, regulators and senior stakeholders.

Responsabilidades

• Develop and mature information security policies, standards, and procedures aligned with ISO 27001.
• Manage full policy lifecycle, including approvals, reviews, ownership, and version control.
• Maintain the information security risk register and track remediation actions.
• Prepare risk reports for management and governance committees.
• Support compliance activities under DORA, GDPR, PCI DSS and PSD2 across licensed entities.
• Coordinate internal and external audits and manage the audit calendar.

Conhecimentos

GRC experience

ISO 27001

Audits coordination

AI in GRC

English writing

Multitask management

Regulatory awareness

Scripting / low-code

Ferramentas

Vanta

ServiceNow GRC

OneTrust

Descrição da oferta de emprego

payabl. is seeking a Senior GRC Specialist to mature governance, risk and compliance across ISO 27001, DORA, GDPR and PCI DSS. You will own policies, risk registers, and audit readiness for a multi-entity payments group, with hands-on program delivery and AI-enabled automation.

You will manage third-party risk, support FCA-regulated activity for the UK entity, and coordinate Big Four ICT audits with a modern GRC platform, while steering the AI governance program and vendor assessments.