GRC Expert
You will lead efforts to align security and compliance programs with DORA and MiCA. You will perform gap analyses and risk assessments develop policies and controls manage customer audits and questionnaires and coordinate compliance across internal teams. You will monitor regulatory changes train employees and report progress to senior management.
Responsibilities
- Develop and execute the compliance strategy for DORA and MiCA
- Conduct gap analyses and risk assessments
- Develop and maintain policies procedures and controls
- Manage EU customer audits due diligence queries and security questionnaires
- Integrate compliance initiatives into business processes
- Identify assess and remediate risks
- Monitor the evolving EU regulatory landscape
- Educate and train internal teams on relevant regulations
- Plan the annual work program and budget
- Report to senior and executive management
Requirements
- 4+ years of experience in cybersecurity or GRC
- Experience navigating security and GRC programs
- Knowledge of DORA MiCA GDPR MaRisk and TIBER-EU
- Understanding of SOC 2 ISO NIST and CIS frameworks standards and certifications
- Experience driving security and compliance programs in complex organizations
- Experience engaging technical and non-technical audiences
- Background in the financial or digital assets sector is preferred
- Technological understanding and familiarity with product development practices are preferred
- CISM CRISC CISSP or other cybersecurity or risk management certification is preferred