IT Security and Systems Compliance Specialist

You will support IT regulatory compliance and maintain related documentation, trackers, and control evidence. You will review IT security, access governance, IT general controls, critical systems, vendors, and third parties. You will validate compliance requirements for technology changes and implementations, support AML/CFT and VASP controls, and assist with regulatory examinations, audits, remediation, and issue tracking.

Responsibilities

• Support compliance with applicable IT-related regulatory requirements and maintain supporting documentation and trackers.
• Perform IT security, access governance, and ITGC reviews for critical systems.
• Conduct compliance reviews of critical systems and compliance technology, including payment, wallet and custody, AML/CFT, screening, and Travel Rule systems.
• Support technology projects, system changes, and implementations by validating compliance and control requirements.
• Perform IT vendor and third-party compliance assessments and monitor remediation.
• Support AML/CFT and VASP technology controls through system, access, configuration, and audit-trail reviews.
• Support BSP and AMLC examinations, audits, and remediation activities through evidence preparation, documentation, and issue tracking.

Requirements

• Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, Business, Finance, or a related field.
• At least 2 years of hands-on experience in IT Compliance, IT Risk, IT Audit, Information Security Governance, Technology Risk, or a related function.
• Prior experience performing IT compliance activities, preferably within banking, fintech, payments, e-money, VASP, or another regulated environment.
• Hands-on experience with ITGC, access reviews, IT security controls, vendor due diligence, audit evidence, and remediation tracking.
• Experience supporting regulatory examinations, internal or external audits, or compliance assessments.
• Familiarity with BSP regulatory requirements and technology-related regulatory controls.
• Experience with GRC, audit, compliance, access governance, or other control-management tools is an advantage.