Cyber GRC

This is a fully remote position, open to applicants in Europe.

📋 Description

• Design, implement, and maintain the Governance, Risk & Compliance (GRC) program in cybersecurity.

• Develop and update information security policies, standards, and procedures.

• Identify, assess, and monitor security risks in processes, systems, and suppliers, keeping the risk register up to date.

• Coordinate internal and external audits.

• Manage compliance with frameworks such as ISO 27001, PCI-DSS, SOC 2, and NIST.

• Conduct risk assessments for third parties and critical vendors (vendor risk management).

• Follow up on security findings and coordinate their resolution with the relevant technical areas.

• Monitor regulatory changes in the countries where Retorna operates and update policies and controls accordingly.

• Design and execute security awareness programs for employees.

• Collaborate with Engineering, Legal, and Operations to ensure the effective implementation of controls.

⛳️ Requirements

• Bachelor's degree in Systems Engineering, Computer Science, Cybersecurity, or related fields.

• At least 3 years of experience in GRC roles, compliance, or cybersecurity risk management.

• Previous experience in fintech, banking, or other regulated companies is valued.

• Knowledge of frameworks such as ISO 27001, PCI-DSS, SOC 2, or NIST CSF.

• Experience in developing information security policies and procedures.

• Experience conducting risk assessments for third parties.

• Familiarity with data protection and security regulations applicable to the financial sector in LatAm.

• Desirable: proficiency in GRC tools (Vanta, Drata, OneTrust, or similar).

• Valued: familiarity with technical cybersecurity concepts (pentesting, vulnerability management, cloud architecture).

• Strong written and verbal communication skills, with the ability to influence without direct authority.

• Ability to work autonomously 100% remotely and coordinate with multiple areas of the company.

🏝️ Benefits

• 100% remote work.

• Local holidays.

• Unlimited days off.

• People-first culture, focusing on results and flexibility.