Senior Governance, Risk, and Compliance Specialist

Glia

. Own and lead SOC 2, PCI DSS, GDPR, and HIPAA/HITECH compliance programs and audit processes from planning through completion .

Posted 11/12/2026full-timeRemote • EstoniaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading compliance programs such as SOC 2, PCI DSS, GDPR, and HIPAA/HITECH, with a strong focus on audit processes and stakeholder communication. Proven ability to manage third-party risk and implement security controls in collaboration with engineering and product teams.

Highest-signal resume keywords

SOC 2 CompliancePCI DSS ComplianceGDPR ComplianceHIPAA/HITECH ComplianceGovernance Risk & Compliance (GRC)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityAudit ManagementRisk ManagementCloud-Based SystemsStakeholder ManagementAnalytical SkillsProblem-Solving SkillsDocumentation SkillsSecurity ControlsThird-Party Risk Management

Soft Skills

Communication SkillsCuriosityAdaptabilityProactive Ownership

Tools & Technologies

AWS

Certifications & Qualifications

CISACISMCRISCCISSPISO/IEC 27001 Lead AuditorISO/IEC 42001 Lead Auditor

Industry Keywords

Compliance ProgramsAudit ProcessesSecurity AwarenessRegulatory TrendsVendor Security Compliance

Tech Stack

Tools & technologies

AWSCloudDistributed Systems

About the role

Key responsibilities & impact

Own and lead SOC 2, PCI DSS, GDPR, and HIPAA/HITECH compliance programs and audit processes from planning through completion
Drive evidence collection, documentation, and audit readiness
Serve as primary contact for external auditors, customers, and prospects on security and compliance matters
Lead enterprise customer security discussions, deep-dive reviews, and security questionnaires
Oversee internal and external assessments across systems, services, and teams
Own and evolve the Third-Party Risk Management program and monitor vendor and partner security compliance
Maintain, enhance, and scale security controls and compliance processes
Partner with engineering and product teams to implement compliance requirements
Track remediation efforts and ensure timely resolution
Produce and present audit and compliance reports to stakeholders and leadership
Promote security awareness and monitor evolving regulatory and compliance trends

Requirements

What you’ll need

6+ years of experience in Information Security, Governance Risk & Compliance (GRC), Audit, or Risk Management
Strong hands-on experience with SOC 2, PCI DSS, GDPR, and HIPAA/HITECH frameworks
Proven experience owning and leading audits and compliance initiatives
Experience working with cloud-based and distributed systems, preferably AWS
Strong project and stakeholder management skills
Strong analytical and problem-solving skills
Ability to translate complex security and compliance concepts into clear documentation and business-friendly language
Strong communication skills with technical teams and external stakeholders
High curiosity, adaptability, and proactive ownership
Excellent written and spoken English
Estonia work authorization: unrestricted legal right to work without employer-led registration or permit application
Strongly preferred: hands-on ISO/IEC 42001 experience
Strongly preferred: one or more of CISA, CISM, CRISC, CISSP, ISO/IEC 27001 Lead Auditor, or ISO/IEC 42001 Lead Auditor certifications
Nice to have: ISO/IEC 27001 implementation experience