Are you passionate about security Governance, Risk and Compliance (GRC)? Do you thrive in a dynamic environment where your experience and your security expertise can shape the future of our organization?

We are looking for a GRC Specialist like you to join our growing Information Security Governance team. In this role, you will:

• Develop and implement robust GRC frameworks to ensure compliance with increasingly stringent industry regulations and standards.
• Lead the reporting and presentation of our GRC activities to internal and external stakeholders, ensuring transparency and accountability.
• Collaborate with cross-functional security teams to maintain and communicate our Information Security Management System (ISMS).
• Maintain clear and accurate GRC documentation.
• Drive continuous improvement in our GRC processes, ensuring they meet regulatory expectations.
• Provide strategic insights to senior leadership, enabling data-driven decision-making in a regulated environment.

What to expect:

You will join a great team of cyber security experts supporting SWIFT Global Security GRC practices. As part of our Governance function, you will work with diverse talented teams committed to excellence: you will work closely with business units, security teams, technology teams and other units.

You have the unique talent of marrying business concepts, including SWIFT services, operations and technologies with information security risks and compliance obligations.

You have excellent inter-personal skills and can manage relationships effectively. You are able to see win-win outcomes and drive discussions toward such outcomes.

While you will follow a standardized approach, you will innovate and change processes as needed. You will spot areas of improvement and work towards making meaningful changes. You will ensure that SWIFT tackles the most urgent and highest priorities, using data and your analytical skills.

You will work on leading edge practices and technologies (agile teams, data analytics, container, cloud) supporting a worldwide critical infrastructure, highly secure and advanced financial organization. You will grow your cyber security knowledge, relate cyber to business benefits and learn from the leaders in the secure financial transactions space.

Qualifications

What will make you successful

Technical skills & knowledge:

• Broad knowledge of cyber security concepts including cryptography, authentication and authorization, access control, secure architectures, threat modeling, vulnerabilities and software security.
• Strong knowledge of regulatory requirements (e.g. GDPR, ISO27001, PCI-DSS) and experience in regulatory reporting.
• 3-5 years of experience in GRC, risk management, or compliance.
• A bachelor’s degree in computer science, Cyber Security or similar disciplines.
• Excellent interpersonal skills and the ability to communicate effectively with technical and non-technical audience. 
• Good analytical skills to translate complex GRC activities into clear and actionable insight.

Preferred Qualifications

• Relevant security certifications (e.g. CISA, CRISC, CISSP) are a plus.
• Expertise in cyber security working for financial institutions or other critical infrastructures.
• Expertise in working within global organizations with offices around the world.
• Prior consulting or similar service-oriented experience for internal and external customers.

Professional skills & competencies

• Autonomous, driven, with strong ability to quickly adapt and respond to change.
• Customer oriented and quality mindset – we continually strive to deliver true customer value.
• Open-minded, solutions oriented, and a true team player – gaining energy through collaboration with others.
• Fluent in English (spoken and written).
• You have the unique talent of marrying business concepts, including SWIFT services, operations and technologies with cyber security risks.
• You have excellent inter-personal skills and can manage relationships effectively. You are able to see win-win outcomes and drive discussions toward such outcomes.