Senior Governance, Risk, and Compliance (GRC) Specialist

Glia
Estonia
Remote

Who this role is best for

Geared toward candidates with deep compliance expertise and a track record in leading audits, comfortable with cloud-based systems and cross-functional collaboration. The role is remote-friendly and emphasizes global regulatory frameworks.

Best fit for

  • Candidates with 6+ years in GRC and a history of managing complex compliance programs
    — “6+ years of experience in Information Security, Governance Risk & Compliance (GRC), Audit, or Risk Management.”
  • Professionals who have led SOC 2, GDPR, and similar audits and can manage external stakeholders
    — “Act as a primary point of contact for external auditors, customers, and prospects on security and compliance matters.”
  • Individuals who can translate compliance into technical implementations and work with engineering teams
    — “Partner with engineering and product teams to translate compliance requirements into practical implementations.”

Things to consider

  • The role demands ownership of compliance programs and audit readiness across multiple frameworks.
    — “Own and lead compliance programs and audit processes (SOC 2, PCI DSS, GDPR, HIPAA/HITECH) from planning through successful completion.”
  • The position requires managing third-party vendor compliance and internal assessments.
    — “Own and evolve the Third-Party Risk Management program, managing and monitoring the security compliance of vendors and partners.”

How to stand out

  • Emphasize your hands-on experience with compliance frameworks like SOC 2 and GDPR.
    — “Strong hands-on experience with frameworks such as SOC 2, PCI DSS, GDPR, HIPAA/HITECH.”
  • Showcase your ability to communicate complex compliance requirements to non-technical teams.
    — “Ability to translate complex security and compliance concepts into clear documentation and business-friendly language.”
  • Demonstrate familiarity with cloud systems, particularly AWS, in your application materials.
    — “Experience working with cloud-based and distributed systems (preferably AWS).”
  • Include any certifications such as CISA, CISM, or ISO/IEC 27001 Lead Auditor in your profile.
    — “One or more relevant certifications: CISA, CISM, CRISC, CISSP, ISO/IEC 27001 Lead Auditor, or ISO/IEC 42001 Lead Auditor.”
Pace · SteadyCollaboration · HighAutonomy · MediumDecision Impact · Company

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • successful completion of audits
  • enhanced security compliance
  • improved vendor compliance
Typical background
6+ years of experience in GRCstrong hands-on experience with compliance frameworks

Skills & requirements

Required

SOC 2PCI DSSGDPRHipaa/hitechSecurity ComplianceThird-party Risk ManagementCloud-based SystemsProject ManagementAudit Readiness

Preferred

AWS Experience

Stack & domain

SOC 2PCI DSSGDPRHipaa/hitechCloud-based SystemsAWSProject ManagementSecurity ComplianceThird-party Risk ManagementCommunicationProblem-solvingTeamworkLeadershipStrategic AdvisingFinanceTechnology

About the role

Original posting from Glia via Ashby

About Glia

Glia is the #1 Banking AI platform, empowering community and regional financial institutions to create efficiencies, accelerate loan growth, drive deposits, and deliver experiences that win against megabanks and fintechs.

Glia's Banking AI Operating System is a central intelligence layer on top of existing tech stacks, activating an AI workforce of specialized agents that draw from banking data, interaction history, and integrated systems of record. These banking-trained agents automate workflows across voice and digital–from front office to back office–resulting in decreased operational costs and the Universal Banker model.

Trusted by 700+ banks and credit unions for its ironclad security and reliability, Glia delivers the industry’s first contractual no-hallucination guarantee. It’s why Glia customers quickly and confidently put Banking AI to work with measurable results from day one. More information about Glia can be found at glia.com http://glia.com.

The Role

We’re looking for a Senior GRC Specialist to play a critical role in maintaining, enhancing, and scaling our control environment. This position is key to strengthening our security compliance posture, increasing customer trust, and enabling company growth.

You will operate as a senior member of the Information Security & Compliance team, owning compliance initiatives end-to-end, leading audits, and acting as a trusted partner to both internal teams and external stakeholders.

What You’ll Do

  • Own and lead compliance programs and audit processes (SOC 2, PCI DSS, GDPR, HIPAA/HITECH) from planning through successful completion.
  • Drive evidence collection, documentation, and audit readiness, ensuring high-quality and timely delivery.
  • Act as a primary point of contact for external auditors, customers, and prospects on security and compliance matters.
  • Lead security discussions with enterprise customers, including deep-dive reviews and security questionnaires.
  • Oversee internal and external assessments across systems, services, and teams.
  • Own and evolve the Third-Party Risk Management program, managing and monitoring the security compliance of vendors and partners.
  • Maintain, enhance, and scale security controls and compliance processes across the organization.
  • Partner with engineering and product teams to translate compliance requirements into practical implementations.
  • Track and drive remediation efforts, ensuring accountability and timely resolution.
  • Produce and present audit and compliance reports to internal stakeholders and leadership.
  • Act as a strategic advisor by promoting security awareness and staying ahead of evolving regulatory and compliance trends.

Requirements

  • 6+ years of experience in Information Security, Governance Risk & Compliance (GRC), Audit, or Risk Management.
  • Strong hands-on experience with frameworks such as SOC 2, PCI DSS, GDPR, HIPAA/HITECH.
  • Proven experience owning and leading audits and compliance initiatives.
  • Experience working with cloud-based and distributed systems (preferably AWS).
  • Strong project and stakeholder management skills, with the ability to manage multiple concurrent initiatives.
  • Strong analytical and problem-solving skills, with a solution-oriented mindset.
  • Ability to translate complex security and compliance concepts into clear documentation and business-friendly language.
  • Strong communication skills with experience engaging both technical teams and external stakeholders.
  • High level of curiosity, adaptability, and proactive ownership in navigating evolving security challenges.
  • Excellent written and spoken English.

Strongly Preferred

  • Hands-on experience with ISO/IEC 42001 (AI Management System).
  • One or more relevant certifications: CISA, CISM, CRISC, CISSP, ISO/IEC 27001 Lead Auditor, or ISO/IEC 42001 Lead Auditor.

Nice to Have

  • Experience with ISO/IEC 27001 implementation.

Glia is an equal-opportunity employer. Glia does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law.

The Glia Talent Acquisition team uses @glia.com http://glia.com and @ darina.danchenko@gliatalent.comgliatalent.com http://gliatalent.com email addresses for coordinating interviews, providing updates, and sending documents.

Our hiring process involves an introduction, practical and team interviews, and a decision and offer. For more information, visit our Recruitment Privacy Notice page https://www.glia.com/eu-recruitment-privacy-notice or contact our talent team via talent@glia.com

Source: Glia careers (Ashby)

Similar roles

More roles at Glia