Governance Risk and Compliance Lead
Skills
ConflictConflict ResolutionISO 27001ISO StandardsLeadershipPayment Card Industry Data Security StandardSales
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- 5+ years in cybersecurity
- 3+ years running compliance frameworks like PCI DSS or ISO 27001
- Experience at a company that enables payments preferred
- Technical fluency to read system diagrams and discuss architecture with engineers
- Ability to explain why a control matters
- Track record of running a security or GRC program solo or as the founding function
- Strong verbal communication with both executives and engineers
- Collaborative low ego approach that builds buy in and resolves conflict
Nice to have
- Low ego
- Collaborative
- Strategic communicator
- Cross functional
- Startup minded
Day to day
- Own PCI compliance end to end from scoping through audit and remediation while balancing speed and excellence
- Build and run a vulnerability management program that identifies prioritizes and closes issues effectively
- Translate technical risk into clear decisions senior leadership can act on and turn business priorities into an executable risk program for engineering
- Craft programs that help non security teams understand and own their role in the risk picture