Senior Specialist, Information Security

📋 Description

• Own and evolve GRC domains end-to-end (e.g., ISMS operations, BCM, risk governance), including
• Drive control rationalization and proportionality: tighten controls for critical/regulated assets
• Facilitate and challenge high-impact risk assessments (new products, major architectural changes
• Lead complex audits and assessments end-to-end (multi-entity, regulator-facing), including
• Design and run a risk-based control testing program to identify weaknesses and drive durable
• Set due diligence depth and ongoing monitoring requirements for critical suppliers (e.g., cloud

🎯 Requirements

• 6-10 years of experience in information security GRC, audit/assurance, risk management, compliance
• Proven track record leading audits/assessments and driving remediation across multiple teams and
• Strong working knowledge of ISO 27001 and DORA (and/or SOC 2 / PCI DSS / NIST) with ability to
• Strong understanding of technology risk across cloud, IAM, SDLC governance, incident management
• Excellent written and verbal communication; able to produce executive-ready materials and

🎁 Benefits

• Flexibility to work where you thrive – Hybrid working model with 25 days/year to work from any
• Reward for your impact – Competitive total compensation including stock option plan
• Support for your mental wellbeing – Access confidential coaching, counselling, and mental health
• Time to recharge – 3 additional paid days off in 2027 after 6 months tenure
• Continuous learning and growth – Unlimited access to Udemy library
• Exclusive perks and rewards – Discounts from partners worldwide