Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Senior Governance, Risk and Compliance Specialist

Workable (global search)107,990 open roles

Where
Cyprus
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Governance, Risk and Compliance SpecialistWorkable (global search) · Cyprus

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.9% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 6 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 7.9%7 days
  4. 14.9%14 days
  5. 34.0%30 days
This job: posted 2 days ago

Workable (global search) median: 6 days open

The posting

The role is about: We are looking for a Senior GRC Specialist to strengthen and mature our information security governance, risk and compliance function. Reporting to the Head of Information Security, you will develop and operate the frameworks, registers and processes that keep a regulated, multi-entity payments group compliant and audit-ready — across ISO 27001-aligned governance, DORA, GDPR, PCI DSS and operational resilience requirements. This is a hands-on senior role with real ownership: you will build programs as well as run them, work with a modern GRC platform, and apply AI and automation to how the work itself gets done.

  • Location: Onsite in Limassol, Cyprus or fully remote from Portugal or Poland
  • Reporting to: Head of Information Security

What will you do:

  • Developing, maintaining, and continuously improving information security policies, standards, and procedures aligned with ISO 27001 and applicable regulatory requirements.
  • Managing the full policy lifecycle, including approval workflows, periodic reviews, ownership, and version control across the document estate.
  • Maintaining the information security risk register, including risk identification, assessment, treatment tracking, and formal risk acceptance.
  • Preparing risk reporting for management and governance committees, and tracking remediation actions through to closure.
  • Supporting compliance activities under DORA, including the Register of Information, as well as PSD2 / EBA ICT guidelines, GDPR, and PCI DSS across our licensed entities.
  • Contributing to operational resilience activities for our UK entity in line with FCA requirements.
  • Managing the third-party risk management lifecycle, including due diligence, security questionnaires, risk rating, onboarding gates, and periodic reassessments.
  • Maintaining the vendor register and contractual security requirements in collaboration with the Legal team.
  • Coordinating internal and external audits, including Big Four ICT audits, regulator requests, and PCI QSA cycles, and managing the audit calendar.
  • Owning evidence collection and maintaining an evidence library for reuse across audits, certifications, and client questionnaires.
  • Administering and developing our GRC platform, including control monitoring, automated evidence collection, framework mapping, and reporting.
  • Applying AI tools to day-to-day GRC activities, including policy drafting, gap analysis, evidence assembly, and questionnaire responses, while helping to automate recurring processes.
  • Contributing to our AI governance programme, including the assessment of AI vendors, support of the AI system register, and alignment with emerging regulatory requirements such as the EU AI Act.

What we need:

  • 3+ years of experience of similar experience in GRC, information security governance, IT audit or IT risk management
  • Working knowledge of ISO/IEC 27001; exposure to DORA, GDPR or PCI DSS
  • Experience in regulated financial services (payments, e-money, banking, fintech) or advisory work for such companies
  • Hands-on experience with audits — coordinating them, preparing evidence, remediating findings
  • Familiarity with GRC platforms or a strong interest in compliance automation
  • Strong written English — your output goes to auditors, regulators and senior stakeholders
  • Ability to manage multiple workstreams against fixed deadlines
  • Nice to have
  • Certifications such as CISA, CRISC, CISM, CIPP/E or ISO 27001 Lead Auditor / Lead Implementer
  • Direct experience with DORA implementation, EBA outsourcing guidelines or FCA operational resilience
  • Experience implementing or administering a GRC platform (e.g. Vanta, ServiceNow GRC, OneTrust or similar)
  • Familiarity with ISO 42001, the EU AI Act or AI risk management
  • Light scripting or workflow automation skills (low-code tools)

Hiring Process:

  • Step 1 – Thinking in Action (40 minutes) Your first conversation will be with our Talent Acquisition team. We'll explore your background, career journey, motivations, and overall fit for the role. As part of this discussion, you'll also complete a short technical screening that will be reviewed by our engineering team. This stage helps us understand both your experience and how you approach technical challenges.
  • Step 2 – Hiring Manager interview (60-minutes) you will meet the hiring manager Head of Information Security, to explore your skills, achievements, and alignment with the role.
  • Step 3 – Final Interview (45 minutes) The final stage is a group interview with senior members of our Technology squad, which may include the CTO, CPO and Head of Security. Together, we'll discuss team fit, collaboration style, expectations from both sides, and any remaining questions about the role, team, or technology domain. This is also an opportunity for you to learn more about our culture and ways of working.

The perks of being a payabl.er:

  • Grow with Us: Annual Learning Budget for professional development (eligible after probation)—because your growth is our growth.
  • Celebrate Together: We bring colleagues from all offices together for unforgettable company celebrations.
  • Global Collaboration & Events: Opportunities to participate in international company events and initiatives, connecting with colleagues from all regions and contributing to a truly global community

Let's embark on a journey to redefine the landscape of payments together. We're not just offering a role; we're inviting you to be a part of something bigger. Join our team, and let's innovate, disrupt, and lead the future of payments. Together, we can make an impact that resonates. Welcome to the team!

Please review our Privacy Policy to understand how we process your personal data during the recruitment process: https://payabl.com/privacy-policy

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.