Senior GRC Specialist

Job Summary

Owning and leading the governance, risk, compliance, and security awareness programs, the full-time Senior GRC Specialist will ensure compliance with various regulations and certifications while managing risk inventories and collaborating on cross-functional projects.

Key responsibilities

• Establish and maintain governance, risk, compliance, and security awareness programs
• Ensure compliance with regulations such as GDPR and maintain various compliance certifications
• Develop corporate policies and procedures in alignment with ISO27001, NIST, and SOC2 frameworks

Required qualifications

• 5+ years of experience in governance, risk management, and compliance roles within a SaaS environment
• Successful completion of a SOC2 Type 2 audit for a SaaS company
• Strong knowledge of regulatory requirements and industry standards (e.g., SOC2, ISO 27001, PCI, GDPR)
• Experience developing corporate security policies, standards, and procedures
• Understanding of cloud environments (GCP, AWS, Azure) and experience with security and risk management