risk and compliance specialist

Oxford Management Consultancy

<p><b>Job Title:</b> GRC Specialist</p><p><b>Location:</b> Lahore, Pakistan &mdash; Onsite<br/><b>Employment Type:</b> Full-time</p><p><b>About Us</b></p><p>At <b>AHK Global Solutions</b>, we are committed to building secure, compliant, and well-governed business operations that align with international standards such as <b>ISO 27001, SOC 2, and GDPR</b>.<br/>We&rsquo;re looking for a <b>Governance, Risk &amp; Compliance (GRC) Specialist</b> who is eager to grow in a dynamic, tech-driven environment and support our ongoing compliance and risk management initiatives.</p><p>If you have an analytical mindset, a passion for process improvement, and a keen eye for compliance, this is a great opportunity to develop your career in the global risk and governance domain.</p><p><b>Role Overview</b></p><p>The <b>GRC Specialist</b> will assist in implementing and maintaining the company&rsquo;s governance, risk, and compliance framework. The role involves supporting audits, maintaining documentation, coordinating risk assessments, and ensuring adherence to internal policies and external regulatory requirements.</p><p><b>Key Responsibilities</b></p><ul><li>Assist in the implementation and maintenance of <b>GRC frameworks</b> aligned with ISO, SOC, and regulatory standards.</li><li>Support internal and external <b>audits</b>, ensuring timely documentation and corrective actions.</li><li>Conduct <b>risk assessments</b>, identify gaps, and support mitigation planning.</li><li>Maintain the <b>compliance documentation library</b> (policies, SOPs, controls, evidence records).</li><li>Coordinate with cross-functional teams (IT, HR, Operations) to ensure compliance with data privacy and security standards.</li><li>Monitor regulatory and policy changes and communicate relevant updates to management.</li><li>Support awareness programs and internal training on governance, compliance, and information security.</li><li>Participate in <b>vendor risk assessments</b> and assist in third-party compliance reviews.</li></ul><p><b>Qualifications &amp; Experience</b></p><ul><li><b>Education:</b> Bachelor&rsquo;s degree in <b>Information Security, Computer Science, Business Administration, Risk Management</b>, or a related field.</li><li><b>Experience:</b> 1&ndash;2 years of experience in <b>GRC, Information Security, Risk, or Compliance roles</b>.</li><li><b>Knowledge of:</b></li><li>ISO 27001 / SOC 2 frameworks</li><li>Risk assessment and internal control procedures</li><li>Basic understanding of data protection (GDPR or equivalent)</li><li><b>Skills:</b></li><li>Strong documentation and analytical skills</li><li>Excellent attention to detail and process orientation</li><li>Proficient in MS Office Suite and familiar with GRC tools (ServiceNow, Archer, or others)</li><li>Strong communication and collaboration skills</li></ul><p><b>Preferred Certifications (Optional but Advantageous)</b></p><ul><li>ISO 27001 Lead Implementer / Auditor</li><li>CompTIA Security+</li><li>Certified in Risk and Information Systems Control (CRISC)</li><li>Any introductory GRC or Information Security certification</li></ul><p><b>What We Offer</b></p><ul><li>Competitive salary package based on experience and qualifications.</li><li>Exposure to <b>international compliance standards (ISO, SOC, GDPR)</b>.</li><li>Continuous learning and professional development opportunities.</li><li>Supportive environment that values precision, accountability, and growth.</li><li>Opportunity to collaborate with cross-border teams and global clients.</li></ul><p>Job Type: Full-time</p><p>Work Location: In person</p>

GRC Specialist

Hewlett Packard Enterprise | HPE

<div>Cybersecurity Issue Management Specialist<br>
<p></p>
This role has been designed as &lsquo;Hybrid&rsquo; with an expectation that you will work on average 2 days per week from an HPE office.<p></p><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p><b>
Who We Are:</b></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>
Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work. We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today&rsquo;s complex world. Our culture thrives on finding new and better ways to accelerate what&rsquo;s next. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good. If you are looking to stretch and grow your career our culture will embrace you. Open up opportunities with HPE.</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p><p><b>
Job Description:</b></p><p></p><div><p><b><br>
About the role</b></p></div><div><p>
The Cybersecurity Issue Management Specialist is responsible for overseeing the identification, tracking, and remediation of cybersecurity issues across the organization. This role ensures that identified risks, audit findings, and control gaps are properly documented, prioritized, and resolved within defined timelines. The specialist will partner with internal stakeholders including Enterprise IT, risk management, compliance, corporate functions and business units to drive accountability, improve security posture, and support regulatory and audit readiness.</p></div><p></p><div><p><b>
About You</b></p></div><div><p>
You will have expertise in cybersecurity processes, control assessments, reviewing and improving audit findings within an enterprise environment. We are looking for someone with great documentation skills, experience with GRC tools to input and track exceptions/issues to closure.</p></div><div><p>
You will work independently and on high-impact projects in fast-paced environments, with advanced expertise across cyber and IT security. Strong communication skills are essential, enabling you to explain complex technical issues to non-technical audiences.</p></div><p></p><div><p><b><br>
You will </b><b>be responsible for</b><b>:</b></p></div><div><div><p><b>
Issue Lifecycle Management</b></p></div><div><ul><li><p>
Maintain and enhance the cybersecurity issue and exception management process, ensuring consistent identification, tracking, and remediation of issues.</p></li></ul></div><div><ul><li><p>
Coordinate with control owners and technical teams to ensure timely remediation and accurate documentation of risk mitigation activities.</p></li></ul></div><div><ul><li><p>
Manage the central issue tracking system in a GRC tool to ensure data integrity and completeness.</p></li></ul></div><p></p><div><p><b>
Risk &amp; Control Oversight</b></p></div><div><ul><li><p>
Partner with various internal teams including Risk, IT Operations, and Compliance teams to assess issue severity, assign ownership, and monitor remediation progress.</p></li></ul></div><div><ul><li><p>
Validate remediation evidence and confirm closure of issues in alignment with HPE enterprise policy and regulatory expectations.</p></li></ul></div><div><ul><li><p>
Support the integration of issue management with other cybersecurity processes such as vulnerability management, incident response, and third-party risk management.</p></li></ul></div><div><ul><li><p>
Should be able to analyze various issues to uncover underlying cybersecurity process shortcomings.</p></li></ul></div><p></p><div><p><b><br>
Reporting &amp; Metrics</b></p></div><div><ul><li><p>
Develop dashboards and key performance indicators (KPIs) to report on issue trends, remediation timelines, and overall risk posture.</p></li></ul></div><div><ul><li><p>
Provide regular updates to senior leadership and audit evidence as required.</p></li></ul></div><div><ul><li><p>
Identify process improvements to increase efficiency and reduce recurring issues.</p></li></ul></div><p></p><div><p><b>
Governance &amp; Compliance</b></p></div><div><ul><li><p>
Ensure issue management practices align with frameworks such as NIST CSF, ISO 27001, SOC 2, and regulatory standards (e.g. GDPR, HIPAA).</p></li></ul></div><div><ul><li><p>
Support audit and regulatory examinations by providing documentation, evidence, and process explanations.</p></li></ul></div><div><ul><li><p>
Work with other compliance functions e.g., Risk, Vulnerability Management, TPRM teams.</p></li></ul></div><p></p><div><p><b><br>
Education &amp; Experience Requirements</b></p></div><div><ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent experience desired.</li></ul></div><div><ul><li> 5+ years of experience in cybersecurity, with a focus in GRC area.</li></ul></div><div><ul><li>Proven experience in cybersecurity frameworks, and audits.</li></ul></div><div><ul><li>Strong knowledge of GRC processes including Risk, Policy, Compliance, and Controls</li></ul></div><div><ul><li>Certifications: The following certifications are desired. CISSP, CISM, CRISC, CGEIT, or similar cybersecurity/risk certifications.</li></ul></div></div><p></p><div><div><div><div><div><div><div><p><b>
Additional Skills:</b></p></div></div></div></div></div></div></div>
Accountability, Accountability, Action Planning, Active Learning, Active Listening, Agile Methodology, Bias, Business, Coaching, Creativity, Critical Thinking, Cybersecurity, Data Analysis Management, Data Collection Management (Inactive), Data Controls, Design Thinking, Development Methodologies, Empathy, Follow-Through, Growth Mindset, Implementation Methodologies, Infrastructure Design, Intellectual Curiosity (Inactive), Long Term Planning, Managing Ambiguity {+ 4 more}<p></p><div><div><div><div><div><div><div><p><b>
What We Can Offer You:</b></p></div></div></div></div></div></div></div><p><b>
Health &amp; Wellbeing</b></p><p>
We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.</p><p></p><p><b>
Personal &amp; Professional Development</b></p><p>
We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have &mdash; whether you want to become a knowledge expert in your field or apply your skills to another division.</p><p></p><p><b>
Unconditional Inclusion</b></p><p>
We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know varied backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.</p><p></p><div><div><div><div><div><div><div><p><b>
Let's Stay Connected:</b></p></div></div></div></div></div></div></div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>
Follow @HPECareers on Instagram to see the latest on people, culture and tech at HPE.
</p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p></p>#unitedstates
#cybersecurity<p></p><p><b>
Job:</b></p>
Information Technology<p><b>
Job Level:</b></p>
Expert<p></p><p><b><br>
States with Pay Range Requirement</b></p><p></p><p>
The expected salary/wage range for a U.S.-based hire filling this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. If this is a sales role, then the listed salary range reflects combined base salary and target-level sales compensation pay. If this is a non-sales role, then the listed salary range reflects base salary only. Variable incentives may also be offered. Information about employee benefits offered can be found at https://myhperewards.com/main/new-hire-enrollment.html.</p><p></p>
USD Annual Salary: $105,500.00 - $243,000.00<p></p><div><div><div><div><div><div><div><p>
HPE is an Equal Employment Opportunity/ Veterans/Disabled/LGBT employer. We do not discriminate on the basis of race, gender, or any other protected category, and all decisions we make are made on the basis of qualifications, merit, and business need. Our goal is to be one global team that is representative of our customers, in an inclusive environment where we can continue to innovate and grow together. Please click here: Equal Employment Opportunity.</p></div></div></div></div></div></div></div><p><b>
Hewlett Packard Enterprise is EEO Protected Veteran/ Individual with Disabilities.</b></p><p></p><p><br>
HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.</p></div>

Cybersecurity Issue Management Specialist

HSBC

<div><p><b>Some careers have more impact than others.</b></p><p>
If you&rsquo;re looking for a career where you can make a real impression, join HSBC and discover how valued you&rsquo;ll be.</p><p>
HSBC is one of the largest banking and financial services organisations in the world, with operations in 62 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.</p><p>
We are currently seeking an experienced professional to join our team in the role of <b>Vice President , Tech and Cyber Specialist</b></p><p><b>
Business: Risk &amp; Compliance</b></p><p><b>
Principal responsibilities</b></p><ul><li>
Provide specialist actionable and contextual guidance across Technology and Cyber Security risks within both enabling business growth whilst maintaining related risks within agreed US appetite</li><li>
Responsible for the review of US controls relating to Technology and Cyber Security risks</li><li>
Responsible for supporting the Risk Stewards with internal and external events, providing insight and learnings relevant to controls relating to Technology and Cyber Security risks.</li><li>
Influence and provide direction to the 1LOD and ERM Business &amp; Functions team to ensure they fulfil own roles and responsibilities and manage resilience risk according to the Group&rsquo;s frameworks and within US stated appetite</li><li>
Manage relationships with wider ERM team.</li><li>
Partner with ERM Business &amp; Functions team and 1LOD to identify, measure, mitigate, monitor and report Technology and Cyber Security risks</li><li>
Responsible for ensuring awareness of the ERM risk impact associated with the role and must act in a manner that takes account of ERM risk considerations.</li><li>
You will adhere to and be able to demonstrate adherence to HSBC internal control standards. This is achieved by adherence to all relevant procedures, keeping appropriate records and, where appropriate, by the timely implementation of internal and external audit points, including issues raised by external regulators.</li></ul><p><b>
 </b><b>Leadership &amp; Teamwork
</b></p><ul><li>Challenge and influence to ensure specialist advice and guidance is understood and followed</li><li>
Partner with relevant stakeholders to ensure a strong risk management culture and behaviours are effective and embedded</li><li>
Work in conjunction with ERM Business &amp; Functions team and the wider specialist teams</li><li>
Support diversity and reflect the HSBC brand and organisational values</li><li>
You will be expected to be able to work largely independently, taking a lead in how to best split your time and attention between the various technologies and tasks.</li><li>
You will often have to balance the need to move quickly in adopting new technologies, against the need to mitigate the risks they pose.</li></ul><p><b>
Requirements :</b></p><ul><li>
Strong level of business knowledge and Technology and Cyber Security risk expertise</li><li>
Strong level of risk management knowledge and relevant experience</li><li>
Comprehensive knowledge of the internal control environment</li><li>
Ability to communicate effectively, building strong relationships and influence senior internal stakeholders</li><li>
Comprehensive knowledge of the external environment (threat, regulatory, geopolitical, competitor, technological landscapes)</li></ul><p><b>
Required Technical Skillset</b></p><ul><li>
Graduate or post graduate</li><li>
Minimum of 7+ years of experience in technology and or cyber security risk preferable</li><li>
Adequate professional certificate in Technology and Cyber Security Risk, e.g CISA, CISSP</li><li>
Exposure to emerging technologies is preferable</li><li>
Strong Technology and Cyber Security risk expertise including risks, threats, common controls &amp; techniques</li><li>
Excellent verbal, written and interpersonal communication skills</li></ul><p><b>
Others</b></p><ul><li>
The role requires operational and engagement between 2pm &ndash; 11pm IST</li><li>
Ability to challenge practices and capabilities while maintaining a strong working relationship with the teams involved.</li><li>
Effective management of time to work across multiple disciplines, time zones, etc.</li><li>
Sensitivity to Cultural diversity and ability to dynamically adapt interpersonal style to build effective relationships.</li><li>
Understanding and Applying Risk Management in Context.</li><li>
Providing Expert Advice and Robust Challenge</li></ul><p><b>
You&rsquo;ll achieve more at HSBC</b></p><div>
HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.&rdquo;
</div><div>Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
</div><p><b>***Issued By HSBC Electronic Data Processing (India) Private LTD***</b></p></div>

VP, Tech and Cyber Specialist

Nomod

Onboarding Specialist <br><div>
<p>At Nomod we're looking for an Onboarding Specialist to join our team. You'll be on the frontline helping compliant merchants get up and running with Nomod as quickly as possible.</p>
<p> </p>
<p>Read on to figure out whether this could be right up your alley!</p>
</div>
<div>Full-time   Remote</div>
  
 <div> <div><b>
 About the job <br></b><p>We re looking for an Onboarding Specialist to join our team. The ideal candidate is a proactive problem solver, a quick yet analytical thinker, possesses great communication skills, and has focus on the customer experience.</p>
</div> </div>
 <div> <div>
<p>As an Onboarding Specialist, you will:</p>
<ul>
<li> <p>Be responsible for the fast and smooth onboarding of new merchants to the Nomod platform, carrying out KYC/KYB and account reviews</p> </li>
<li> <p>Be super responsive in assisting merchants who have queries about our onboarding process and documentation requirements, giving them a truly delightful experience</p> </li>
<li> <p>Onboard compliant merchants and help them get started charging their customers as quickly and efficiently as possible</p> </li>
<li> <p>Identify risky and non-compliant merchants using our internal framework, engage with merchants, via email, WhatsApp and voice, to gather additional information to allow us to form a clear picture of the activity taking place and the associated risks, and communicate our decision courteously and professionally</p> </li>
<li> <p>Manage the merchant onboarding pipeline in an organised and responsive manner, including handling multiple cases at various stages of progress simultaneously</p> </li>
<li> <p>Use your judgement to escalate unusual or challenging cases to team leads, providing appropriate input, and actioning the next steps</p> </li>
<li> <p>Proactively Investigate account verification behaviour, identify patterns, and help design, implement and refine processes to combat high risk and fraudulent accounts</p> </li>
<li> <p>Communicate with merchants to clearly update them on the status of their accounts, transactions and payouts, working closely with our Support and Growth team to ensure consistency in our messaging</p> </li>
<li> <p>Work with an agile, globally distributed team and be able to harness constructive feedback</p> </li>
<li> <p>Be proud of what you work on, whilst obsessing about the quality of what you produce</p> </li>
<li> <p>Have regular opportunities for career growth. We re growing quickly and are forming new teams as we do. We have a bias towards internal promotion into leadership roles</p> </li>
<li> <p>Ensure that everyone is blown away with their Nomod experience</p> </li>
</ul>
<p>You ll experience what it is like to work in a fun, entrepreneurial, and high growth startup!</p>
<p> <strong>What we d like<br> </strong>You do not need to be intimately familiar with any of the technologies that we work with. Great people are effective at quickly learning what we use or introduce us to new ways of working.</p>
<p>Having said that, we think an Onboarding Specialist should:</p>
<ul>
<li> <p>Be educated to at least degree level or equivalent</p> </li>
<li> <p>Have previous experience in a risk, operations or dispute management role, ideally in a financial services or merchant acquiring environment</p> </li>
<li> <p>Have exceptional written and verbal skills in English. If you re bi or trilingual in Arabic, Hindi or Urdu, that would be incredible</p> </li>
<li> <p>Have relentless focus on delivering a delightful experience to users</p> </li>
<li> <p>Have obsessive attention to detail while also being able to spot the bigger picture</p> </li>
<li> <p>Love diving deep into investigations based on a user s story utilising an array of tools</p> </li>
<li> <p>Be persistent, resilient and comfortable asking challenging questions in the face of pushback from users</p> </li>
<li> <p>Be comfortable making high value, and sometimes emotionally difficult decisions, often without perfect information</p> </li>
<li> <p>Have lots of energy, be proactive, think quickly and revel in solving problems that may require a slightly different approach each time</p> </li>
<li> <p>Enjoy building relationships with people, and have excellent interpersonal skills and emotional intelligence</p> </li>
<li> <p>Chrome, Gmail, Google Docs, and similar web tools are second nature</p> </li>
<li> <p>Be creative, innovative, data driven, and have the ability to take on lots of responsibility, while orchestrating multiple deadlines and pushing for outcomes</p> </li>
<li> <p>Deliver no matter what it takes</p> </li>
<li> <p>Have the ability to thrive in a fully remote, distributed organisation</p> </li>
<li> <p>Be lots of fun to work with!</p> </li>
</ul>
<p> <strong>Nice to haves</strong> </p>
<ul>
<li> <p>Prior experience at a high growth startup or at an established fintech firm</p> </li>
<li> <p>Experience using data to build and refine risk and fraud tools</p> </li>
<li> <p>Fluency in other languages in addition to English</p> </li>
<li> <p>Experience working with a remote, global, multicultural team</p> </li>
</ul>
<p> <strong>What you ll get<br> </strong>As an Onboarding Specialist you will receive:</p>
<ul>
<li> <p>Your choice of equipment</p> </li>
<li> <p>Competitive pay</p> </li>
<li> <p>Access to our upcoming ESOP</p> </li>
<li> <p>Incredible co-workers (yep, really!)</p> </li>
<li> <p>A super nice, flexible, distributed work environment</p> </li>
</ul>
</div> </div>
 <div> <div>
 Apply for the job <br><p>Do you want to join our team as our new Onboarding Specialist? Then we'd love to hear about you!</p>
</div> </div>
<div> Apply now </div>

Onboarding Specialist

[24]7.ai

<div>
 <p>
  Position : Security &amp; Compliance Specialist
 </p>
 <p>
  Reports to: Manager InfoSec, GRC
 </p>
 <p>
  Department: Information Security (InfoSec)
 </p>
 <p>
  Location: Bangalore
 </p>
 <p>
  Work Mode : Hybrid
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Key Responsibilities
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role oversee the development, evaluation and implementation of governance, risk and compliance.
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role provides operational and conformance checking of information security implemented. The role will undertake specific audits tasks directly and will work with identified stakeholders to ensure that audit lifecycle is in compliance.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Additionally, this role will undertake regular conformance checking tasks to ensure compliance is met to acceptable security levels in different audits.
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role will also undertake a number of critical asks and requests from security projects which manages to successful delivery of projects and the associated resources.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Further, this role will work with all departments across Technology, Business and Third Party vendors/partners and manages inter-dependencies / work-streams and across multiple projects to ensure that Projects are delivered on time:
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Provide consulting services for Technology &amp; Business team for Audit Security process and implementation of controls.
  </li>
  <li>
   Define Security assessment scope, requirements, time lines and goals.
  </li>
  <li>
   Pro-actively reviews all gaps found on audits related to systems and types of access controls on various risks like Cyber Threats, Data Security and compliance and communicate for timely actions to mitigate them.
  </li>
  <li>
   Supports in managing all type of internal and external InfoSec audits (end to end), status of Security assessment, Report Observations and remediation with all the agreed timelines.
  </li>
  <li>
   Works with end customer SPOC to ensure all the desired requirements are delivered by liaising with all the business stakeholders.
  </li>
  <li>
   Delivers Security Assessments projects on time, and at the expected quality, have root- cause analysis with clear action plan and obtain sign-off with all relevant parties.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Preferred Skills
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Ensure the organization complies with local, federal and international regulatory and legal requirements
  </li>
  <li>
   Stay up to date on all major privacy and data protection laws, GDPR, CCPA, DPA, PIPEDA etc.
  </li>
  <li>
   Experience in handling various Security Assessments, regulatory requirements but not limited to PCI- DSS, ISO27001, ISO9001, GDPR, CCPA, SOC2 and privacy shield.
  </li>
  <li>
   Practical understanding of security standards, Processes and risk frameworks.
  </li>
  <li>
   Has good understanding of audit frameworks and various datasheet involved in preparing for the external audits.
  </li>
  <li>
   Knowledge of current industry best practices and standards, local/international security and compliance guidance.
  </li>
  <li>
   Broad, and commensurately high-level knowledge of Security technology, such as: PKI, firewalls, access management, encryption, IDS &amp; IPS, Cyber threats, encryption, and identity management.
  </li>
  <li>
   Strong time management, communication and prioritization skills.
  </li>
  <li>
   Ability to work with Technical and Non- Technical business owners.
  </li>
  <li>
   Practical understanding of security processes and risk frameworks.
  </li>
  <li>
   Partners with External consultants/ internal stakeholders on Regulatory Changes to ensure regulatory changes are added within the system of record.
  </li>
  <li>
   Drive integration with Compliance teams aligned to Business Units for all the related audits (end to end).
  </li>
  <li>
   Knowledge of current industry best practices and standards, local/international security and compliance guidance.
  </li>
  <li>
   Conducting deep dives into specific areas of focus based on Risk and Regulatory priorities as and when needed.
  </li>
  <li>
   Proficiency in reviewing and assessing process flows to detect potential risks, deficient controls, duplicated effort, extravagance, and fraud, non-compliance with laws, regulations, and management policies.
  </li>
  <li>
   Partners with other Operations Managers to ensure timely and effective delivery for all audit requirements.
  </li>
  <li>
   Contribute to the Group ISMS content development, maintenance and maturity.
  </li>
  <li>
   Take the interface between custom authorities and colleagues/partners on customs Audits.
  </li>
  <li>
   Drive matrixed project planning and execution to deliver and sustain privacy compliance
  </li>
 </ul>
 <p>
  <strong>
   <u>
    Required Qualifications
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Bachelor/Master of Science degree. Computer Science, Engineering, Telecommunications or management degree(would be advantage)
  </li>
  <li>
   6/6+ years&rsquo; experience in audits and compliance management
  </li>
  <li>
   Excellent planning, multi-tasking, organization and problem solving skills.
  </li>
  <li>
   Knowledge of certifications and framework like NIST, HIPAA, ISO 27K, PCI-DSS and SOC2.
  </li>
  <li>
   Excellent communication skills.
  </li>
  <li>
   Hold certifications like ISO9001, ISO 27001 and Green belt(added advantage)
  </li>
 </ul>
 <p>
 </p>
</div>


Security & Compliance Specialist

Lendo

<div><p>As Lendo continues to grow, we&rsquo;re strengthening our governance and risk functions to ensure the business operates with the highest standards of integrity and compliance. The Compliance Unit plays a key role in making sure Lendo adheres to all applicable laws, regulations, and internal policies. In this role, you&rsquo;ll provide oversight, advisory support, and training across the organization - helping to embed a culture of compliance and protect the business from regulatory, operational, and reputational risks.</p><p><b><br>
Key Responsibilities:</b></p><p></p><ul><li><p><br>
Maintain effective communication with supervisory/regulatory bodies; track and address their observations; coordinate with internal departments to remediate and correct deficiencies on a periodic basis.</p></li></ul><ul><li><p>
Operate a risk-based compliance program and include outcomes, inspection observations, and recommendations in periodic compliance reports.</p></li><li><p>
Identify, document, and assess ad-hoc compliance risks across business activities.</p></li><li><p>
Maintain comprehensive compliance and risk registers, including risk assessments and mitigation actions</p></li><li><p>
Establish quantitative and qualitative measures for non-compliance risk; use technology and data aggregation/filters to generate risk indicators and assess whether additional actions are needed.</p></li><li><p>
Maintain an updated tracker of all regulatory deadlines, ensuring full ownership and timely submissions.</p></li><li><p>
Assist to develop, implement, and review compliance programs and policies.</p></li><li><p>
Analyze new or revised policies, procedures, and processes; recommend actions to address potential non-compliance risks.</p></li><li><p>
Conduct training and awareness sessions for employees on compliance standards and obligations.</p></li><li><p>
Compile, communicate, and explain relevant laws, regulations, and circulars to all departments/units upon receipt; ensure timely incorporation into each function&rsquo;s policies and procedures according to its mandate.</p></li><li><p>
Collaborate with company staff and provide guidance on day-to-day, compliance-related matters.</p></li><li><p>
Maintain a continuously updated database of all applicable instructions/circulars, classified by department/unit, and ensure company-wide access.</p></li><li><p>
Recommend approvals to engage external service providers and verify their adherence to applicable regulatory requirements.</p></li></ul><p></p><p><b>
Qualifications:</b></p><p></p><ul><li><p>
Experience in compliance, risk management, or regulatory roles.</p></li><li><p>
Familiarity with SAMA or equivalent regulatory frameworks.</p></li><li><p>
Strong understanding of compliance risk identification and reporting.</p></li><li><p>
Demonstrate strong communication and coordination skills with internal and external stakeholders to ensure alignment and follow-up on compliance matters.</p></li><li><p>
Continuous-improvement mindset with measurable control enhancements in Fintech environment</p></li></ul><p></p><p><b>
Nice to Have:</b></p><p></p><ul><li><p><br>
Professional certifications (CCO, CRCM, ICA).</p></li><li><p>
Prior experience in fintech, financial services, or highly regulated industries.</p></li><li><p>
High judgment under time pressure; crisp escalation and documentation.</p></li></ul></div>

Compliance Officer

Google

<div>Note: By applying to this position you will have an opportunity to share your preferred working location from the following: <b>Washington D.C., DC, USA; Austin, TX, USA; Chicago, IL, USA</b>.<h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree or equivalent practical experience.<br>
</li>
<li>7 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Master's degree or PhD in Law, Business, Compliance or a related field.</li>
<li>Experience in bringing structure and clarity to ambiguous situations.</li>
<li>Understanding of compliance program management principles, risk assessment methodologies, and internal control frameworks.</li>
<li>Ability to collaborate effectively with cross-functional teams, executive management, regulators, and external stakeholders.</li>
<li>Ability to identify potential risks and develop innovative solutions to ensure ongoing compliance and mitigate potential issues.</li>
<li>Excellent problem-solving and verbal and written communication skills.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2>
The Risk, Compliance and Integrity (RCI) organization brings together critical compliance, assurance, risk and governance functions across Google to help the company meet compliance needs and enable our businesses to innovate. Our goal is to make compliance an advantage for Google by driving data-driven and policy-based compliance programs. We manage our operations through risk-based prioritization and governance and consistent and constructive regulator engagement.<br>
<br>
In this role, you will lead and elevate our compliance program. You will require understanding of compliance frameworks, risk assessment, and internal controls, and collaborate effectively across the organization and influence at all levels. You will effectively manage compliance initiatives from inception to completion which includes defining clear objectives, establishing metrics, monitoring progress, and ensuring timely and accurate reporting to stakeholders.The US base salary range for this full-time position is $131,000-$192,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.<div></div><div><br>
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</div></div><p></p><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Architect and implement an compliance and risk management program tailored to the organization's specific needs and regulatory environment.</li>
<li>Develop a set of clear, quantifiable metrics and Key Performance Indicators (KPIs) to objectively measure and track the program's effectiveness and identify areas for improvement.</li>
<li>Deliver regular reports to executive management, providing actionable insights into the program's overall status, emerging risks, compliance performance, and recommended next steps.</li>
<li>Partner closely with cross-functional teams across the organization to embed compliance and risk management principles directly into core business processes, ensuring proactive risk mitigation.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Content and AI Compliance Specialist, RCI

Search 10000+ Risk and compliance specialist jobs near you this November. New roles added regularly across leading industries. Apply today.