Overview
We are looking for a Senior Security GRC Specialist to support the Cybersecurity function in establishing, operating, and continuously improving a unified governance and compliance framework across PCI DSS, ISO/IEC 27001, and NIS2 .
Responsibilities
- Support the definition, rollout, and maintenance of a unified security governance and compliance framework across PCI DSS, ISO/IEC 27001, and NIS2 .
- Translate regulatory requirements into clear security controls, procedures, and documentation standards .
- Support PCI DSS and ISO/IEC 27001 audits , including planning, evidence reviews, interviews, follow-ups, and remediation tracking.
- Coordinate evidence collection with control owners, ensuring completeness, quality, and timely delivery.
- Work with technical and non-technical teams to validate effective implementation of security controls .
- Support continuous compliance activities , periodic reviews, and governance checks.
- Contribute to compliance reporting and management updates , highlighting risks, gaps, and progress.
- Ensure alignment with internal security policies and corporate governance .
Must have
- 5+ years in Security GRC, cybersecurity compliance, audit support, or governance roles.
- Hands-on experience with PCI DSS and ISO/IEC 27001 audit cycles (internal and/or external).
- Strong knowledge of PCI DSS v4.x , ISO/IEC 27001 , NIS2 , and ISO 22301 fundamentals .
- Ability to work with technical teams and understand technical audit evidence .
- Strong documentation, organization, and traceability skills.
- Fluent in English and Spanish .
Apply directly or send your CV , daily rate , and availability for a call to .
#J-18808-Ljbffr
Solliciteren