Mid-level GRC Specialist – Risk & Compliance

About the role

ACE Money Transfer is looking for a mid‑level Governance, Risk & Compliance (GRC) Specialist to strengthen its Risk & Compliance function. You will design, implement and maintain a comprehensive GRC framework that supports regulatory adherence, cybersecurity controls, internal audit and enterprise risk management across a fast‑growing financial services business.

Key responsibilities

• Develop, maintain and enforce enterprise‑wide governance frameworks, policies and procedures aligned with regulatory requirements and industry best practices.
• Lead enterprise risk assessments, maintain a dynamic risk register covering cyber, credit, operational, market and reputational risks, and design key risk indicators (KRIs).
• Monitor regulatory developments such as DORA, GDPR and relevant CBI equivalents, manage regulatory submissions and conduct compliance gap analyses.
• Maintain the IT risk and control framework in line with standards like ISO 27001, NIST CSF and PCI‑DSS, and collaborate on third‑party risk assessments and data‑privacy controls.
• Act as primary liaison for internal and external audits, coordinate information requests, track findings and ensure timely remediation.
• Support board‑level governance reporting, prepare risk committee materials and facilitate risk workshops with business owners.

Required profile

• 2‑3 years of GRC experience within banking, insurance, asset management or fintech.
• Proven ability to manage risk registers, conduct risk assessments and support audit processes.
• Strong understanding of regulatory frameworks such as DORA, GDPR and UK financial regulations.
• Excellent communication skills to interact with senior leadership, business units and regulators.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (NIST CSF)
• PCI‑DSS
• DORA
• GDPR