GRC Specialist @ Papaya Global

4 years of hands-on experience in GRC, information security compliance, or a related field Proven experience managing SOC 2 Type I/II audits and certification processes Hands-on experience with ISO 27001 implementation and/or certification audits Familiarity with DORA (Digital Operational Resilience Act) requirements and their practical application Experience handling customer security questionnaires and due diligence requests – Must Strong knowledge of information security risk management methods and frameworks, including but not limited to: NIST, ISO 27001, SOC 2, HIPAA, PCI-DSS, GDPR, CCPA, and other relevant regulations. Ability to work in a fast-paced environment with multiple priorities and deadlines. Excellent communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and stakeholders. Strong analytical and problem-solving skills, with the ability to identify and mitigate potential risks and issues. Experience working with cloud-based technologies and collaboration tools such as Slack, Microsoft Teams, Google Workspace, etc. Ability to work independently and as part of a team, with minimal supervision.