Dynamic Head of GRC leading global governance, risk, and compliance at PPRO. Transforming security frameworks for cloud-native payment operations across multiple regions.
Responsibilities
Lead PPRO’s global Security GRC strategy and team, to support our international regulatory and compliance footprint
Oversee and enhance our ISO27001:2022 and PCI DSS v4.0 programmes, building a culture of continuous compliance through automation and control transformation.
Partner with relevant functions to ensure ongoing DORA compliance, including security risk management, incident reporting, operational resilience testing and governance
Define and deliver a strategy for a pragmatic, high-value 2nd line automated control assurance programme, underpinned by relevant business metrics
Own and manage regulatory expectations on security topics by the CSSF in Luxembourg, FCA in the UK and other international bodies as relevant
Maintain and enhance PPRO’s security risk register, defining and delivering cross-organisation improvement and remediation roadmaps
Lead security control testing, issue management, KRI monitoring, SLA reporting and Board-level reporting
Act as Information Security Officer for PPRO’s local Luxembourg entity.
Own third party security risk management and oversight for PPRO across the full procurement lifecycle
Partner closely with Engineering to build shared understanding and transform controls via thoughtful automation, streamlining evidence collection and control monitoring
Act as the primary face to external auditors, regulatory examiners and major enterprise customers
Manage internal and external audits end-to-end, ensuring preparation, evidence readiness and smooth execution
Coach colleagues across Product, Engineering and business functions on regulatory expectations and risk-informed decision-making
Operate as a trusted partner to leadership teams, bringing pragmatic recommendations and crisp communication
Requirements
A proven track record transforming traditional GRC frameworks (ISO27001, PCI DSS, SOC2) into modern, automated, developer-friendly control assurance programmes.
Solid grounding in financial services regulation, payments, operational resilience, outsourcing/cloud guidelines etc.
Strong experience interacting with regulators and auditors (CSSF, FCA, etc.) and implementing regulatory requirements.
Proven ability to run risk management processes, control frameworks and audit cycles.
Experience evaluating technology, cyber and operational risks in a cloud-native environment.
Engineering-first mindset, with an understanding of cloud-native architectures (AWS preferred) and how GRC requirements fit into engineering workflows.
Experience with GRC tooling, workflow automation or process optimisation.
Ability to translate regulatory requirements into practical, technical control expectations.
Excellent communicator, capable of influencing executives, engineers, auditors and regulators.
Pragmatic, commercially-minded, empathetic and customer-focused.
Deeply collaborative, comfortable and effective operating in a fast-paced, ambiguous environment
Benefits
Hybrid working - We offer a hybrid structure with a 3 days / week on site expectation, so you can strike the balance between office and home working. In addition to our 30-day holiday allowance, we also provide a work from abroad policy, enabling employees to work remotely for up to another 30 days per year
Learning and Development - We offer a €1,000 annual budget to support your professional growth—because investing in your development benefits us all. In addition, we provide leadership cafés, on-the-job training, and other opportunities to help you grow your skills and thrive in your role.
Lunch Vouchers - 12,80euros x 18 / month - Enjoy a moment of conviviality and a good and balanced meal thanks to your Lunch Pass.
Enhance Family Leave - We understand the importance of family - that's why we offer enhanced family leave to support you during key life moments.
Travel Insurance - because better safe than sorry - the travel insurance is covering (partially with certain excess amounts): Sickness, Costs in relation to rescission/break-off during a travel, Luggage and Accident.
Gym membership - PPRO helps contribute towards the costs of your gym membership, supporting your physical fitness journey while easing the burden on your wallet
Mental Health Platform - We’ve teamed up with a top well-being platform to provide one-on-one therapy, chat therapy, therapist-led courses, guided meditations, and more.
Pet-friendly office - Because work is better with your paw-tners by your side
Commercial Security Service Sales Executive promoting and selling security services at Johnson Controls. Building relationships and delivering solutions to protect people and property within assigned territories.
Security Incident Responder in a leading IT service company in Germany, responsible for analyzing and responding to IT security incidents while developing technological solutions.
Deputy ISSO leading compliance and security activities for NOAA systems at RCG. Requires active Secret clearance and CISSP certification with 8+ years of experience.
Technical Recruiter hiring for Snap Inc.'s security and machine learning teams. Full life cycle recruiting support for technical talent across Snap's innovations.
Cloud Security Architect integrating cyber defense strategies across cloud platforms for Elevance Health. Lead collaboration with infrastructure and engineering teams to enhance security in cloud environments.
Senior Security Advisor designing advanced security solutions for Optiv’s clients. Driving sales and building relationships in a competitive cyber security landscape.
Personnel Security Specialist leading intake operations at PSI. Focused on case coordination, quality assurance, and team training for security suitability tasks.
Security Coordinator overseeing supervision and training of security personnel for BronxWorks' homeless services programs. Ensuring compliance, safety, and coordination with social services directors in Bronx area.
Part - Time Security Officer safeguarding personnel and property at Kaman Air Vehicles. Providing access control, monitoring systems, and responding to incidents in Bloomfield, CT.