The posting
About Payoneer
Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories.
By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence.
Role summary:
Cyber Security Governance protects the security of an organization’s information systems and data by setting policies, monitoring compliance, and following defined procedures to identify, assess, and manage risks from external and internal threats. We are seeking a GRC Security Specialist to join our Cyber GRC Team in Payoneer. You will be joining a tight-knit and highly respected team of GRC experts who are central to Payoneer's security strategy. In this role, you will be at the heart of protecting our global financial platform, directly influencing the trust and safety of millions of users worldwide. As a GRC Security Specialist, you will be responsible for the following:
Glilot, Israel Hybrid Full-time
What you'll do:
- Directly responsible for policies, procedures, and controls to assure compliance with applicable regulatory, legal, and audit requirements as well as good business practices.
- Develop a Cyber security compliance strategy and approach and ensure compliance with contractual requirements and globally recognized standards and guidelines.
- Identify regulatory, legislative, and industry-specific compliance requirements and define controls that can be used to meet those requirements.
- Conduct and participate in periodic internal reviews or audits to ensure that compliance procedures are followed.
- Oversee and evaluate compliance systems to ensure they function effectively.
- Compile and present reports to management on compliance activities and progress.
- Stay updated on industry developments, regulatory trends, and best practices to evaluate their potential impact on the organization.
- Design and implement enhancements in compliance communication, monitoring, and enforcement mechanisms.
- Develop and execute a compliance awareness program, including the creation and distribution of materials for all employees.
- Partner with Legal and IT teams to manage data protection agreements and compliance initiatives.
- Lead the development and execution of company-wide security awareness and training initiatives.
- Assist in incident response planning and investigations when necessary.
Who you are:
- 3+ years of experience in GRC, information security, or compliance within SaaS, cloud, or enterprise IT environments.
- Strong understanding of regulatory frameworks and security standards such as SOC 2, PCI-DSS, NIST, and cloud security frameworks.
- Knowledge and experience in AI Governance, including AI risk management, ethical AI principles, and alignment with frameworks such as EU AI Act, NIST AI RMF, and ISO/IEC 42001.
- Strong knowledge of SDLC methodology.
- Strong knowledge of IT systems and security controls.
- Experience conducting security risk assessments and working with auditors or regulatory bodies.
- Strong project management skills with the ability to manage multiple compliance initiatives.
- Experience working with IT teams and business stakeholders to enhance security measures.
- Excellent communication and collaboration skills, with the ability to translate compliance requirements into actionable business processes.
- Ability to effectively interface with technical staff and senior management.
- Proficiency in English and Hebrew, both written and spoken, to effectively communicate with local and global teams and stakeholders.
- Excellent teamwork and interpersonal communication abilities
Advantage:
- Certifications such as CISM, CISA, CISSP.
- CISO certification from a recognized institution.
- Master’s degree in information security, Business Administration, or related field.
- Experience in the fintech or financial services industry.
#LI-AG2
The Payoneer Ways of Working
Act as our customer’s partner on the inside Learning what they need and creating what will help them go further.
Do it. Own it. Being fearlessly accountable in everything we do.
Continuously improve Always striving for a higher standard than our last.
Build each other up Helping each other grow, as professionals and people.
If this sounds like a business, a community, and a mission you want to be part of, apply today.
We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.
