GRC Security Specialist

About the role

Payoneer is looking for a GRC Security Specialist to join its Cyber GRC Team in Glilot, Israel. You will help shape the company’s security governance, ensuring compliance with global regulations and protecting the financial platform used by millions worldwide.

Key responsibilities

• Define, implement and maintain policies, procedures and controls to meet regulatory, legal and audit requirements.
• Develop and execute a cybersecurity compliance strategy aligned with contractual obligations and recognized standards.
• Identify applicable regulatory and industry requirements and design controls to satisfy them.
• Conduct internal reviews and audits, monitor compliance systems, and report findings to senior management.
• Lead security awareness and training programs across the organization.
• Collaborate with Legal and IT teams on data‑protection agreements and incident response planning.

Required profile

• Minimum 3 years of experience in GRC, information security or compliance within SaaS, cloud or enterprise IT environments.
• Strong knowledge of regulatory frameworks and security standards such as SOC 2, PCI‑DSS, NIST and cloud security frameworks.
• Familiarity with AI governance, including the EU AI Act, NIST AI RMF and ISO/IEC 42001.
• Experience conducting security risk assessments and working with auditors.
• Excellent communication skills in English and Hebrew.

Required skills

• SOC 2 compliance
• PCI‑DSS compliance
• NIST framework
• Cloud security frameworks
• AI governance frameworks (EU AI Act, NIST AI RMF, ISO/IEC 42001)
• SDLC methodology
• IT systems security controls
• Security risk assessment