Overview
Support security compliance activities across Outpayce and Voxel, working with regulatory framework owners on audits, evidence collection, security questionnaires and follow-up on compliance actions. This is not a coding or software development role.
What you'll do
- Collect, validate and organize audit evidence across security and regulatory programs
- Ensure evidence is complete, traceable and audit-ready
- Own and maintain a structured, traceable and easy-to-use compliance evidence repository
- Track audit findings, open items and action plans
- Follow up with stakeholders and framework owners on pending actions
- Escalate overdue actions when needed and support timely closure of compliance activities
- Manage and support customer security questionnaires
- Use approved content in RFPiO and help improve the questionnaire knowledge library
- Identify the right information and stakeholders needed to complete responses
- Work alongside framework owners and progressively build knowledge of ISO/IEC 27001, PCI DSS, DORA, NIS2, CRA, PA, SOC 1 and SOC 2
- Provide operational back-up when required
- Contribute to compliance reporting, dashboards and calendars
What you'll need
- Around 3-6 years of experience in Information Security, IT Audit, GRC, Compliance, or a related analyst/coordination role
- Overall experience between 8-12 years
- Experience supporting audits, evidence management, compliance activities or security questionnaires
- General understanding of security concepts such as access control, logging, vulnerability management and secure SDLC
- Comfortable working with tools such as Jira, SharePoint or similar evidence/ticketing/GRC platforms
- Strong organization, attention to detail, communication and stakeholder coordination skills
- Professional working proficiency in English
- Bachelor's degree in Computer Science, Information Systems, Engineering or a related field
Nice to have
- Working knowledge of ISO/IEC 27001 and/or PCI DSS
- Familiarity with Azure or AWS at a functional level
- French or Spanish proficiency
- Certifications such as PCI ISA, CISA, CISSP or CCSP (not mandatory)
Details
Read the full description and apply on the company’s own careers page.