Security GRC Analyst

Job Summary

Owning the security governance, risk, and compliance for acquisitions, the full-time remote Security GRC Analyst will assess acquisition targets against security baselines, map existing controls to compliance frameworks, and set achievable remediation milestones for newly acquired teams.

Key responsibilities

• Assess acquisition targets and map existing controls to Payward's security framework
• Define and track remediation milestones for acquired entities to ensure compliance
• Act as the primary contact for acquired entity leadership and maintain policy coverage

Required qualifications

• 5-7+ years in security governance, IT risk, or compliance within regulated financial services or fintech
• Direct experience onboarding acquired companies into existing compliance programs
• Working knowledge of SOX/ICFR IT general controls and external audit requirements
• Experience with ISO 27001, SOC 1, SOC 2, and PCI DSS, including control mapping
• Preferred certifications: CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer