Senior Governance, Risk and Compliance Specialist

Responsibilities

• Maintain GRC portals including risk registers, control records, evidence libraries, and dashboards
• Ensure GRC portal data is complete, accurate, and aligned to agreed standards
• Coordinate portal updates, access reviews, and workflow changes with stakeholders
• Manage the risk action calendar covering assessments, reviews, and audit milestones
• Track action owners, due dates, and completion status for risk and compliance activity
• Support technology risk assessments, control reviews, and compliance checks
• Prepare risk and compliance status reports, metrics, and packs for leadership review
• Coordinate evidence collection for internal and external audits
• Partner with security, technology, legal, and audit teams to drive GRC action ownership
• Identify opportunities to improve GRC workflows and portal usability

Requirements

• Strong experience in GRC operations within technology, cybersecurity, or audit environments
• Practical experience maintaining GRC tools or portals
• Working knowledge of technology risk management and control frameworks
• Ability to interpret risk requirements into clear actions for stakeholders
• Strong attention to detail and commitment to accurate record-keeping
• Confident communication skills for stakeholder management and escalation
• Familiarity with frameworks such as ISO 27001, NIST, SOC 2, SOX, or GDPR
• Experience with GRC platforms like Vanta, ServiceNow, Archer, or AuditBoard
• Relevant certification such as CISA, CRISC, CISM, or CISSP

About the Company

CUBE is a global RegTech business defining and implementing the gold standard of regulatory intelligence for the financial services industry through AI-powered SaaS solutions.