RemoteLeaf Logo
Log in Sign up

IT Governance, Risk, and Compliance Manager

3 months ago
Bulgaria
Full-time
Lead
Compliance Manager
Legal
AWS CI/CD Cybersecurity Encryption Generative AI Microservices Penetration Testing SIEM SOC
Apply Now
emerchantpay

emerchantpay

emerchantpay specializes in providing seamless and secure online, mobile, and in-store payment processing solutions, along with risk and fraud management services, to help merchants enhance their conversion rates and expand their customer reach globally.

Diversified Financial Services
251-1K
Founded 2002
View All Jobs 11

Description

  • Define and maintain the information security strategy, standards, and roadmap in line with regulations and security best practices.
  • Steer security architecture for a cloud-native environment, including secure-by-design patterns for microservices, APIs, and shared platform services.
  • Establish and govern secure SDLC practices and embed automated security controls into CI/CD pipelines.
  • Define and drive cloud security guardrails across identity, network segmentation, encryption, secrets management, and configuration baselines.
  • Build and operate security monitoring, logging, and threat detection across cloud, infrastructure, and application layers.
  • Lead the security incident response lifecycle and act as incident commander for security events.
  • Own vulnerability and threat management, including scanning, prioritization, remediation tracking, and reporting.
  • Plan and coordinate penetration testing and offensive-security exercises and drive findings to closure.
  • Govern identity and access management, privileged access, and least-privilege principles across cloud and corporate systems.
  • Oversee data protection controls, corporate IT security, security awareness, audit evidence, team leadership, and security posture reporting.

Requirements

  • Bachelor’s or master’s degree in computer science, information security, or a related field, or equivalent practical experience.
  • At least 10 years in information / cyber security, including 2-3 years in a leadership role.
  • Hands-on experience securing cloud-native environments at scale.
  • Deep public-cloud security knowledge, with AWS strongly preferred.
  • Strong experience securing DevOps / CI/CD pipelines and modern microservices architectures, including containers, APIs, and infrastructure-as-code.
  • Working knowledge of application security and secure SDLC across modern programming languages and web frameworks.
  • Hands-on experience with security operations, incident response, and vulnerability management.
  • Solid understanding of ISO 27001, PCI DSS, SOC 2, and NIST CSF.
  • Working AI security literacy, including use of AI-assisted security tooling and securing AI/LLM and agentic applications.
  • Excellent verbal and written communication skills, fluent English, and the ability to influence engineers with data and best practices.
  • Professional certification such as CISSP, CCSP, OSCP, AWS Security Specialty, or CISM is an advantage.
  • Experience in payments, fintech, banking, or another regulated environment is an advantage.
  • Familiarity with operational-resilience expectations, such as DORA-style requirements, is an advantage.
  • Experience standing up a security function is an advantage.

Benefits

  • Fast-growing payment company.
  • Excellent working conditions, casual atmosphere, and state-of-the-art hardware.
  • Modern, challenging, and constantly growing business.
  • Professional development support, including books, trainings, and certifications.
  • Team buildings and fun activities.
  • 25 days paid holiday, plus 1 additional day for every 2 years with the company.
  • Fully distributed and remote work.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Picus Security

Senior Technology Risk & Audit Specialist

Picus Security 51-250 Professional Services

Picus Security is hiring a Senior Technology Risk & Audit Specialist to lead continuous technology assurance, global certification programs, and risk-informed security governance across its cloud-native, AI-driven cybersecurity platform.

Turkey Full-time Senior Compliance Manager
CI/CD Cybersecurity Machine Learning SIEM
5 hours, 37 minutes ago
World Business Lenders

Regulatory and Compliance Team Lead

World Business Lenders 251-1K Real Estate

World Business Lenders is seeking a Regulatory and Compliance Team Lead to oversee its compliance framework across lending, servicing, and corporate operations within a fully remote, multinational organization.

Turkey Full-time Lead Compliance Manager
6 hours, 37 minutes ago
Green Thumb Industries

Regional Market Compliance Manager

Green Thumb Industries 1K-5K Pharmaceuticals

The Regional Market Compliance Manager leads regulatory adherence, risk management, and compliance operations across multiple markets within an assigned region, partnering with leadership and regulatory stakeholders to support compliant business growth.

Anywhere Senior Compliance Manager
$120k-$140k
1 day, 4 hours ago
Precision For Medicine

Regulatory and Start Up Specialist - Fluent in Hungarian

Precision For Medicine 1K-5K Pharmaceuticals

Precision for Medicine is seeking a Regulatory and Start Up Specialist to coordinate regulatory submissions and site activation activities for Hungarian clinical trial sites, ensuring timely approvals and readiness.

Serbia Mid Level Compliance Manager
1 day, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers