Senior GRC Specialist, APAC (Fintech)

TL;DR

Senior GRC Specialist, APAC (Fintech): Building and strengthening regional information security governance, risk, and compliance operations with an accent on regulatory compliance, security controls, and data privacy. Focus on coordinating APAC requirements with global security programs, engaging regulatory bodies, and using AI and automation to improve compliance reporting and evidence management.

Location: Remote role based in Singapore or Shanghai.

Company

Airwallex is a global fintech company providing integrated payments, business accounts, spend management, treasury, and embedded finance solutions.

What you will do

• Act as the regional anchor for information security governance, risk, and compliance across APAC.
• Serve as a trusted contact for regulators, customers, partners, and vendors on enterprise security matters.
• Implement, monitor, and continuously improve security controls and compliance operations.
• Develop security policies, standards, metrics, dashboards, reports, and audit evidence.
• Use AI and automation to streamline compliance workflows, reporting, and communications.
• Coordinate with information security, engineering, legal, and other enterprise stakeholders.

Requirements

• Deep knowledge of PCI DSS, ISO 27001, SOC 2, and comparable security and compliance frameworks.
• Strong understanding of information security concepts, practices, solutions, and audit processes.
• Experience creating and maintaining security policies for complex regulatory requirements.
• Working knowledge of complex cloud environments and their impact on security and compliance.
• Understanding of financial services or payments, ideally with fintech experience.
• At least 4 years of cybersecurity experience and the ability to work independently in the APAC region.

Nice to have

• Cybersecurity degree or certifications such as CISSP, CEH, or CISA.
• Experience with regional financial-industry security compliance requirements.

Culture & Benefits

• Work largely remotely with an international information security organization.
• Operate with significant autonomy, ownership, and self-reliance.
• Collaborate with engineering, IT, legal, and business stakeholders.
• Apply AI and automation to improve established compliance and security practices.
• Work on high-impact security challenges within a high-growth fintech company.