͏

Must Have: 

1  Governance, Risk, and Compliance Expertise
  Practical expierience with cybersecurity compliance framework (eg., NIST).
  Ability to evaluate cybersecurity controls and align them with changing regulatory requirements.
  Experience in maintaining audit trails and managing compliance documentation.
  Experience managing teams  in regulatory operations or cybersecurity GRC.
  Direct experience engaging with regulators or managing compliance audits.
2 Technical Expertise & Regulatory Knowledge
  Solid knowledge of IT and cybersecurity regulatory frameworks, including those from payment and financial service regulators.
  Demonstrated experience in managing regulatory and third-party audits, exams, and compliance questionnaires.
  Familiarity with Three Lines of Defense model in the context of cybersecurity compliance.
  Proven expertise in policy governance, control assurance, and quality reviews within regulated environments.
  Understanding of cybersecurity risk principles, policies, and control testing practices.
3 Soft Skills and Stakeholder Management 
  Strong ability to build and maintain effective relationships with Cybersecurity, Risk, Audit, Compliance, and Business stakeholders.
  Skilled in influencing across different functions, geographies, and levels — especially when working with regulators or executive leadership.
  Capable of collaborating with global teams to ensure consistency and transparency in compliance messaging.
  Excellent written and verbal communication skills, with a focus on evidence documentation, assessment reporting, and presenting compliance positions.
  Proactive and solution-focused in identifying and addressing gaps in cybersecurity controls.
4 Tools & Processes
  Exposure to GRC tools like Archer or similar for managing control frameworks and evidence.
  Familiarity with metrics tracking and reporting for regulatory compliance performance.
  Comfortable using audit and risk management trackers for organizing and documenting lifecycle of compliance engagements.
5 Education, Certifications and Experience
  Bachelor's degree in IT, Risk, or related field. At least one certification: CISSP, CISA, CISM.
  8+ years in Cybersecurity GRC Experience with regulatory audits or compliance programs.

͏

Good to have:

6 Business and Financial Understanding
  Comfortable with managing budgets and understanding how spending affects the business.
  Able to support financial planning for compliance-related activities.
  Understands how to balance compliance goals with available resources.
  Uses financial insights to make better decisions for the team and department.
7  Industry Awareness and Team management
  Familiar with how banks and financial institutions operate.
  Understands how cybersecurity and regulatory compliance fit into the larger business.
  Should be aware of key trends in banking, security, and risk management.
  Experience in Team management.

͏

Deliver