Senior Governance, Risk, and Compliance (GRC) Specialist

Location: Estonia - Remote

Company

hirify.global provides a Banking AI platform and operating system for community and regional financial institutions, using specialized AI agents to automate banking workflows. The platform is trusted by more than 700 banks and credit unions and emphasizes security, reliability, and no-hallucination guarantees.

What you will do

• Own and lead SOC 2, PCI DSS, GDPR, and HIPAA/HITECH compliance programs and audits from planning through completion.
• Drive evidence collection, documentation, audit readiness, and timely delivery of compliance materials.
• Serve as a primary contact for external auditors, customers, and prospects on security and compliance matters.
• Lead enterprise customer security reviews, deep dives, questionnaires, and internal and external assessments.
• Own and evolve the Third-Party Risk Management program, including vendor and partner compliance monitoring.
• Maintain security controls, translate requirements into practical implementations, track remediation, and present reports to leadership.

Requirements

• 6+ years of experience in Information Security, Governance, Risk & Compliance, Audit, or Risk Management.
• Hands-on experience with SOC 2, PCI DSS, GDPR, and HIPAA/HITECH frameworks.
• Proven experience owning and leading audits and compliance initiatives.
• Experience with cloud-based and distributed systems, preferably AWS.
• Strong project, stakeholder management, analytical, problem-solving, communication, and documentation skills.
• Ability to translate complex security and compliance concepts into clear, business-friendly language and engage technical teams and external stakeholders.
• Curiosity, adaptability, and proactive ownership in responding to evolving security challenges.
• Excellent written and spoken English required.

Nice to have

• Hands-on experience with ISO/IEC 42001, the AI Management System.
• Relevant certification such as CISA, CISM, CRISC, CISSP, ISO/IEC 27001 Lead Auditor, or ISO/IEC 42001 Lead Auditor.
• Experience implementing ISO/IEC 27001.

Culture & Benefits

• Remote role based in Estonia.
• Work as a senior member of the Information Security & Compliance team and partner with engineering, product, customers, auditors, vendors, and leadership.
• Equal-opportunity employment with protection against discrimination on legally protected grounds.

Hiring process

• The process includes an introduction, practical and team interviews, followed by a decision and offer.
• Interview coordination and document sharing are handled through hirify.global or hirify.global Talent email addresses.