Senior Governance, Risk & Compliance (GRC) Specialist – Banking

About the role

We are looking for an experienced Senior Governance, Risk & Compliance (GRC) Specialist to lead and strengthen our bank’s GRC framework. You will ensure regulatory compliance, drive enterprise risk initiatives, and work closely with business, IT, security, audit, and regulatory bodies.

Key responsibilities

• Develop, implement and maintain GRC policies, standards, frameworks and procedures.
• Lead enterprise‑wide risk assessments, maintain the risk register and report on operational, technology, cyber and compliance risks.
• Ensure compliance with banking regulations, PCI DSS, ISO 27001, NIST CSF, COBIT and other relevant standards.
• Perform control assessments, gap analyses and coordinate internal, external and regulatory audits.
• Track audit observations, compliance issues and risk mitigation plans to closure.
• Prepare governance reports, compliance dashboards and executive‑level risk summaries.
• Conduct third‑party and vendor risk assessments and review new projects from a GRC perspective.
• Deliver GRC and compliance training to promote risk awareness across the organization.

Required profile

• Bachelor’s degree in IT, Information Security, Cybersecurity, Risk Management, Business Administration or a related field.
• 9+ years of GRC experience within banking or financial services.
• Strong knowledge of banking regulations and regulatory compliance requirements.
• Hands‑on experience with enterprise risk management, IT risk, operational risk and compliance management.
• Proven track record managing internal and external audits and regulatory inspections.

Required skills

• RSA Archer, ServiceNow GRC or MetricStream platforms.
• PCI DSS compliance program implementation and audit coordination.
• ISO 27001, NIST Cybersecurity Framework and COBIT frameworks.