Senior Governance, Risk and Compliance Engineer

We're powering the growth of merchants by helping them take payments easily, securely and globally.

• 5+ years in GRC, information security governance or operational risk within regulated financial services such as payments, e-money, banking or fintech
• Hands-on experience in at least two of: PCI DSS, DORA implementation, GDPR privacy operations, third-party risk, audit & assurance
• Track record of building programs, not just operating them
• Confident, regulator-grade written English
• Genuine working fluency with AI tools applied to personal output

Nice to have:

• Exposure to DORA, PSD2, EBA ICT/outsourcing guidelines, FCA operational resilience or PCI DSS
• Certifications: CIPP/E, CISA, CRISC, ISO 27001 Lead Auditor/Implementer
• Experience implementing a GRC platform
• Light scripting or low-code automation

• Own the policy estate end to end: taxonomy, lifecycle, review cadence
• Build and run third-party risk management: vendor register, DORA, onboarding gates, assessment cycles
• Take ownership of the GRC platform to ensure continuous control monitoring and automated evidence collection
• Scale privacy operations with the DPO across five jurisdictions
• Run the audit and evidence calendar including external ICT audits, PCI DSS, DORA, central bank requests, PCI cycles, and internal audits
• Automate workload
• Contribute to AI governance including AI vendors through third-party gate and integrating regulatory expectations into controls