Security GRC Analyst, Mergers & Acquisitions

Brak informacji o wynagrodzeniu

NieokreśloneZdalnie·LondynFull-time

#479337·Dodano 3 dni temu·0

Źródło: Kraken

Aplikuj teraz

Tech Stack / Keywords

SOX/ICFRISO 27001SOC 1SOC 2PCI DSSCISACRISCCISMCISSPPKM

Podsumowanie oferty

Own the security governance, risk, and compliance onboarding of acquired companies at Payward, from diligence through migration or ongoing central coverage. Assess security controls, map them to compliance frameworks, and drive remediation and audit readiness across acquisitions.

Wymagania

5–7+ years in security governance, IT risk, or compliance, including experience in regulated financial services, fintech, or virtual asset environments.
Direct experience onboarding an acquired company into an existing controls or compliance program.
Working knowledge of SOX/ICFR IT general controls and evidence accepted by external auditors.
Experience with at least two of ISO 27001, SOC 1, SOC 2, and PCI DSS, including mapping controls across frameworks.
Ability to assess control maturity and set remediation plans that receiving teams can complete.
Hands-on delivery, including writing scope, collecting evidence, and closing gaps when needed.
Ability to prioritise with incomplete information and escalate decisions that require leadership.
Ability to build working relationships with control owners in IAM, infrastructure, and engineering.
Ability to translate control gaps into risk language for deal teams and executives.
Strong project management across cross-functional, distributed teams.

Nice to have:

CISA, CRISC, CISM, CISSP, or ISO 27001 Lead Implementer.
M&A or post-merger technology integration experience.
Familiarity with PKM.

Obowiązki

Target Assessment:

Assess acquisition targets against Payward’s security baseline during diligence or immediately after close.
Review security posture, including control environments, identity and access management, infrastructure, third-party dependencies, and audit history.
Document assessments and explain the control-remediation implications of integration to deal teams.

Control Mapping and Framework Onboarding:

Map acquired-company controls to Payward’s control framework and applicable external frameworks.
Identify controls that can be extended as-is, need entity-specific variants, or have no equivalent.
Build entity-specific policy libraries where parent policies do not provide coverage.

Remediation and Milestones:

Assess entity-level control maturity and document the basis for scores.
Set achievable remediation milestones with dates, owners, and stated risk reduction, prioritising the highest-risk gaps.
Track remediation, escalate overdue or material risks, and present proposed risk acceptances and compensating controls to leadership.

Program Integration:

Maintain acquired-entity risks in the enterprise risk register and Security GRC reporting.
Prepare entities for external audit scope, collect evidence, and support audit walkthroughs and fieldwork.
Recommend whether entities should migrate to Payward platforms or reach a maturity level suitable for central program coverage.
Hand entities over to central GRC coverage with documented handovers.
Act as the Security GRC point of contact for acquired-company leadership, finance, and internal audit.
Integrate third parties and vendors into Payward.
Feed recurring findings into diligence and document a repeatable onboarding process.

Inne informacje

Candidates may be asked to complete job-related skills or work-style assessments as part of the hiring process.

Kraken

29 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz