# Senior Governance, Risk, and Compliance (GRC) Specialist

**Company**: Glia
**Location**: Remote, Estonia
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/glia/50e30653-a164-4c51-bd29-42c8fa27506f?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-governance-risk-and-compliance-grc-c9e0c1bd-791/

## Description

We are seeking a Senior GRC Specialist to maintain, enhance, and scale our control environment. This role is crucial in strengthening our security compliance posture, increasing customer trust, and enabling company growth.

As a senior member of the Information Security & Compliance team, you will own compliance initiatives end-to-end, lead audits, and act as a trusted partner to internal teams and external stakeholders.

Key responsibilities:

- Lead compliance programs and audit processes (SOC 2, PCI DSS, GDPR, HIPAA/HITECH) from planning to completion.

- Drive evidence collection, documentation, and audit readiness.

- Act as a primary point of contact for external auditors, customers, and prospects on security and compliance matters.

- Lead security discussions with enterprise customers.

- Oversee internal and external assessments.

- Evolve the Third-Party Risk Management program.

- Maintain, enhance, and scale security controls and compliance processes.

- Partner with engineering and product teams to implement compliance requirements.

- Track and drive remediation efforts.

- Produce and present audit and compliance reports.

- Promote security awareness and stay ahead of evolving regulatory trends.

Requirements:

- 6+ years of experience in Information Security, GRC, Audit, or Risk Management.

- Hands-on experience with SOC 2, PCI DSS, GDPR, HIPAA/HITECH.

- Proven experience in leading audits and compliance initiatives.

- Experience with cloud-based systems (preferably AWS).

- Strong project and stakeholder management skills.

- Analytical and problem-solving skills.

- Ability to translate complex security concepts into clear documentation.

- Strong communication skills.

- High level of curiosity, adaptability, and proactive ownership.

- Excellent written and spoken English.

Preferred qualifications:

- Experience with ISO/IEC 42001.

- Relevant certifications: CISA, CISM, CRISC, CISSP, ISO/IEC 27001 Lead Auditor, or ISO/IEC 42001 Lead Auditor.

- Experience with ISO/IEC 27001 implementation.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Information Security
- Governance Risk & Compliance (GRC)
- Audit
- Risk Management
- SOC 2
- PCI DSS
- GDPR
- HIPAA/HITECH
- cloud-based systems
- AWS
- project management
- analytical skills
- problem-solving skills
- communication skills
- English

### Nice to have
- ISO/IEC 42001
- CISA
- CISM
- CRISC
- CISSP
- ISO/IEC 27001 Lead Auditor
- ISO/IEC 42001 Lead Auditor
- ISO/IEC 27001 implementation

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/glia/50e30653-a164-4c51-bd29-42c8fa27506f?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)