checkout.com - InfoSec Analyst II (GRC)

• 2 to 4 years of experience in GRC, information security compliance, IT audit, or a closely related function, ideally within payments, financial services, or fintech. • Practical working knowledge of PCI DSS (v4.0.1 preferred), ISO 27001, and SOC 2. Familiarity with DORA, NIST CSF, or the EU AI Act is a plus. • Experience supporting or directly managing external audits and assessments, including evidence collation and assessor liaison. • Demonstrated ability to own a programme workstream independently, from planning through to delivery. • Well-versed in risk management processes include risk identification, third-party risk management and merchant due diligence. • Clear written and verbal communication. You can translate a compliance requirement or risk finding for a technical team and a business stakeholder with equal clarity. • Analytical and process-oriented mindset. You look for root causes, not just point-in-time fixes. • Comfortable operating with ambiguity. You can prioritise and structure your work without every requirement being fully defined upfront. • Methodical and well-organised, with strong attention to detail and a consistent track record of delivering on commitments. • Collaborative and pragmatic. You understand that security and compliance must work with the business, not against it. • CISA, CISM, PCIP, ISO 27001 Lead Implementer or Auditor, or equivalent certification. • Familiarity with cloud environments (AWS, Azure, GCP) in a GRC or compliance context. • Experience with GRC tooling, risk platforms, or compliance automation. • Exposure to AI governance frameworks such as ISO 42001, EU AI Act, or NIST AI RMF. • HYBRID WORKING MODEL • All of our offices globally are onsite three times per week (Tuesday, Wednesday, and Thursday). We've worked towards enabling teams to work collaboratively in the same space while also being able to partner with colleagues globally. During your days at the office, we offer great snacks, breakfast, and lunch options in all of our locations. • It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable. • Life at Checkout.com http://Checkout.com • We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection. • Curious about what it’s like to be part of our team? Visit our Careers Page https://www.checkout.com/careers to learn more about our culture, open roles, and what drives us. • For a closer look at daily life at Checkout.com http://Checkout.com, follow us on LinkedIn https://www.linkedin.com/company/checkout/life/ and Instagram https://www.instagram.com/checkout_com/