Global Security GRC Manager (Governance, Risk & Security)

Euronet facilitates the movement of payments around the world and serves as a critical link between our partners – financial institutions, retailers, service providers – and their end consumers, both locally and globally. Our corporate headquarters are located in Leawood, KS. This job is ideally in Kansas City or Denver (US).

The Global Security Governance, Risk & Compliance (GRC) Manager has risk and compliance responsibilities from a technology and security perspective across the global organization. The main objective of the Security GRC Manager is to help deliver best in class Security Governance, Risk and Compliance services to ensure that Euronet operates in a risk mitigated, security managed environment and that Euronet's security compliance objectives are being met. The responsibilities span Euronet's products and services and the internal applications, tools, and infrastructure that support them.

This position will also work closely with the CISO to assist in global CISO initiatives, projects, meetings, certain tool evaluations and/or implementations, and duties that impact and benefit the global organization.

Key Responsibilities:

• Reporting to the Group CISO, you will lead Governance, Risk and Compliance (GRC) work for the security team as well as opportunities to assist the CISO with global meetings, projects, initiatives, and certain tool evaluations and/or implementations.
• Ensure security policies and control functions are aligned to cybersecurity standards/frameworks, compliance, privacy, and legal requirements, and business/emerging risks.
• Assist with GRC tool evaluations (if necessary) and alignment of GRC processes within the respective segments.
• Assist in select global communications, oversight, and initiatives that are to be adopted by segments and entities across the organization.
• Work closely with the Group CISO and security team members to ensure key information security risks and issues are identified, addressed and resolved in a timely manner. Help drive risk analysis, controls, and help implement industry best practices for teams and technologies used across the organization. Partner effectively with Security, IT/Infrastructure, Internal Audit, Privacy, Legal, and other internal peers to support Euronet's compliance with applicable legal, regulatory, and security frameworks.
• Work closely with the Internal Audit Team to ensure alignment on timing, controls reliance, external audit reliance, etc.
• Maintain updated knowledge in the field of risk management and compliance to efficiently work on frameworks or compliance standards including NIST CSF, PCI-DSS, SOX 404, GDPR, CCPA, etc.
• Assist with Third Party Risk Management framework with other applicable functional teams which can include policy, procedures, due diligence questionnaires and the monitoring of third parties’ adherence to information security and data privacy obligations.
• Develop relevant metrics, analyze data, identify trends and help drive improvements to the control environment.
• Work with the CISO on external and internal requests related to Euronet’s IT security program, controls, cyber insurance, and marketing material for POCs or other related Euronet group benefits.
• Assist with employee security training and phishing simulation tool, reporting, enhancements, and awareness materials and campaigns.

Requirements

• 4+ years of relevant cybersecurity/information security or IT internal audit and/or SOX/ISO/PCI experience is preferred. Experience in financial services industry is a plus.
• Experience developing, championing, and managing internal compliance programs.
• Highly organized, self-motivated, and detail-oriented with the ability to work independently in a fast-paced environment. Professional with a strong work ethic.
• Excellent diplomatic interpersonal skills and comfortable working at all levels within an organization and in a wide variety of situations.
• Excellent problem-solving skills and ability to manage competing priorities and deadlines.
• Strong degree of comfort working alongside, engaging and communicating with senior security, IT, legal, privacy, and business-side stakeholders.
• One or more of the following certifications is preferred: CISA, CISM, CISSP
• Recent experience of working in a similar capacity in a financial services organization.
• Relevant industry certification (e.g., ISO 27001 Lead Auditor, CISSP, CISM, etc.) highly desirable.
• An ability to translate security requirements and standards into easily understood business concepts and vice versa.
• Willing to travel domestically and internationally as needed, but not anticipated more than 20-25%.

Benefits

Euronet offers a generous benefit package inclu