GRC Leader (Fintech)

TL;DR

GRC Leader (Fintech): Ownership and uplift of Governance, Security Awareness, and Third-Party Risk Management programs within a global payments business with an accent on aligning policy with operational reality and risk calibration. Focus on operationalizing governance frameworks, building a Security Champions program, and managing payment processor risk.

Location: Hybrid in Buenos Aires, Montevideo, Madrid, Barcelona, Bucharest, or Sao Paulo

Company

hirify.global enables the biggest companies in the world to collect payments in 40 countries in emerging markets.

What you will do

• Align documented policies with day-to-day practice and lead the rollout of risk-calibrated controls.
• Develop targeted security awareness interventions and run a Security Champions program.
• Manage the global Third-Party Risk Management (TPRM) program and Payment Processor Assessment Framework.
• Quantify risks in business terms and track remediation through the Risk Register.
• Lead and mentor a sub-team across governance, awareness, and TPRM.
• Perform manual framework mapping for PCI DSS, SOX, and DORA.

Requirements

• Strong working knowledge of PCI DSS, SOX, DORA, ISO 27001, and SOC 2.
• Fluent English is mandatory.
• Experience in stakeholder navigation and negotiating with VP-level leaders.
• Fluency in using LLMs to automate administrative governance tasks.
• Ability to operate in high-ambiguity and fast-paced environments.

Nice to have

• Prior GRC leadership in fintech, payments, or tech scale-ups.
• Experience securing financial institutions in emerging markets.

Culture & Benefits

• Focus on impact and productivity over fixed hours.
• Flexible schedules.
• Combination of self-managed focus time and in-person connection in collaboration hubs.