Staff GRC Specialist (Cybersecurity)

TL;DR

Staff GRC Specialist (Cybersecurity): Building and operating regional security governance, risk, and compliance capabilities for a global payments platform with an accent on regulatory compliance, data privacy, security controls, and audit readiness. Focus on coordinating APAC requirements, engaging with regulatory bodies, automating compliance work with AI, and developing policies, metrics, dashboards, and evidence for complex cloud and fintech environments.

Location: Remote work; the role can be based in Shanghai or Singapore.

Company

Airwallex provides an integrated payments and financial platform for global businesses, including business accounts, payments, spend management, treasury, and embedded finance.

What you will do

• Act as the regional anchor for the security compliance function across APAC while integrating regional work with global security initiatives.
• Serve as a trusted contact for regulators, customers, partners, and vendors regarding enterprise security.
• Implement, monitor, and continuously improve security controls and regional compliance activities.
• Use AI and automation to streamline compliance operations, reporting, and communications.
• Create and maintain security policies, standards, metrics, dashboards, and audit evidence.
• Coordinate with Information Security, engineering, legal, IT, and other enterprise stakeholders as a regional subject-matter expert.

Requirements

• Deep knowledge of PCI DSS, ISO 27001, SOC 2, and comparable compliance and control frameworks, including information security audit processes.
• Strong understanding of information security concepts and practical experience working with engineering or security teams.
• Experience creating and maintaining security policies for complex regulatory requirements.
• Working knowledge of complex cloud environments and their impact on security and compliance operations.
• Understanding of financial services or payments, preferably in fintech.
• 6+ years of cybersecurity experience, with the ability to work independently and execute regional responsibilities with substantial autonomy.

Nice to have

• Fintech-specific security compliance experience.
• BS or MS in Cybersecurity.
• CISSP, CEH, CISA, or a comparable security certification.

Culture & Benefits

• Remote-oriented collaboration with a global Information Security team.
• High-autonomy role with ownership of regional security and compliance outcomes.
• Opportunity to work on complex, high-growth fintech challenges.
• Culture focused on first-principles thinking, continuous improvement, speed, rigor, and practical execution.
• Cross-functional collaboration with engineering, legal, IT, and business teams.