GRC Specialist | Papaya Global Login Workforce OS Payment OS Contact support EN ES DE FR Products Why Papaya Solutions Resources Company Pricing Contact Us Workforce OS AI Payroll Mastered Contingent OS AI External Workforce Mastered OnePay AI Every Payment Mastered OneData AI Intelligence Layer One Compliance Mastered Every worker. Every country. Every payment. Core Employment Services Platform overview Core End-to-end payroll platform Global payroll Core Run payroll in 180+ countries Employer of record (EOR) Core Hire anywhere without entities Contractor of record (COR) Compliant contractor engagement Platform Capabilities Shadow payroll Cross-border tax obligations Time & attendance Track hours, shifts & PTO Workforce analytics Real-time workforce insights Employee app Employee self-service portal Global
benefits Manage
benefits across borders SmartExpense Agent Automate expense tracking & reporting Every worker. Every country. Every payment. Core Services Platform overview Core Unified contingent platform Contractor management Core End-to-end contractor lifecycle Worker classification Core AI-backed risk determination Platform Capabilities VMS connector Connect your VMS seamlessly Every worker. Every country. Every payment. Core Payment Services Platform overview Core Global payments infrastructure Payments API Core Embed payroll payments anywhere Payment rails Core Fastest in-country delivery Platform Capabilities Split payments Pay across multiple accounts Virtual IBAN account Dedicated receiving accounts Every worker. Every country. Every payment. Core Intelligence How OneData works Core Single workforce data model AI data assistant Core AI-powered data validation Platform Capabilities Integration & mapping Connect your HCM & ERP stack Payment connector Integrate any payment source JE automation Automated journal entries Every worker. Every country. Every payment. Core Tools Platform overview Core Compliance intelligence engine Knowledge base copilot AI Core AI compliance assistant Countrypedia Core Country-by-country regulations Paymentspedia Global payment intelligence We Own It Full Liability Ownership Risk & liability coverage Payment protection Product releases Enterprise Grade Built for Fortune 500 Security & compliance Licensed financial institution Payments transparency 180+ countries coverage AI + Human Experts Side-by-Side Delivery Embedded AI In-country experts Pays for Itself Speed & ROI Proof ROI calculator Customer proof Support By Workforce Type By Business Need By Geography By Industry Independent contractors Compliant engagement globally Payroll workers Full-time employees anywhere Gig workers / freelancers Flexible talent at scale Hybrid workforce Mixed employment models Rapid global expansion Enter new markets in days Compliance & risk We own the liability Vendor consolidation One platform, not twelve Cost optimization 30% ops cost reduction Workforce digital wallets Instant worker access to pay Global equity Equity for every employee Global immigration Visa & mobility management AI Expense agent Streamlined expense reporting Global coverage Operations in 180+ countries US solutions Full US workforce compliance Global
benefits Competitive local
benefits Statutory payments Mandated payments, automated Maritime Crew payroll & compliance Oil and gas Rotational workforce payroll Gaming Global gaming workforce Staffing firms & MSPs Scale your staffing operations Freelance platforms Marketplace payout solutions BPO companies Multi-country BPO payroll Multinational companies One platform, every market Accounting firms White-label payroll services Learn Grow your knowledge Academy Glossary Library Blog Research Proof & Validation See the results All case studies Customer stories Compare Papaya vs competitors Tools Interactive utilities Global employment cost calculator IBAN checker SWIFT finder RFP template Get to Know Us About Our story & mission Our team Leadership & culture Quick Links Careers Join
the team Media & press News & announcements Partners Our partner ecosystem Products Workforce OS Payroll Mastered Contingent OS External Workforce Mastered OnePay Every Payment Mastered OneData Intelligence Layer One Compliance Mastered Why Papaya We Own It Enterprise Grade AI + Human Experts Pays for Itself Solutions By Workforce Type Independent contractors Payroll workers Gig workers / freelancers By Business Need Rapid global expansion Compliance & risk Vendor consolidation By Geography Global coverage US solutions Global
benefits By Industry Maritime Oil and gas Gaming Resources Academy Glossary Library Blog Research Company About Our team Careers Media & press Partners Pricing Contact Us Back GRC Specialist Barcelona, Spain Full-time Engineering Description Papaya Global is a rapidly growing, award-winning B2B tech unicorn with an ambitious mission to revolutionize the payroll & payments industry. With over $400M raised from multiple tier-one investors, our innovative technology provides a comprehensive solution for managing global workforces, encompassing everything from hiring and onboarding to managing and paying employees in over 160 countries. We are seeking GRC Specialist to join the Security group, reporting to the GRC Manager. We are looking for a team player, independent and responsible person, quick learner, who wants to work in a challenging and dynamic environment. You will Lead and manage information security compliance programs, including SOC 2 Type I/II and ISO 27001 audits, certifications, and ongoing compliance activities Support the implementation and maintenance of DORA (Digital Operational Resilience Act) compliance
requirements across the organization Own the end-to-end process of responding to customer security questionnaires, RFPs, and third-party due diligence requests Conduct risk assessments and help develop risk treatment plans to address identified gaps Develop, review, and maintain information security policies, standards, procedures, and guidelines Perform internal audits and gap analyses against regulatory frameworks and industry best practices Collaborate with cross-functional teams (R&D, IT, Legal, Sales) to embed security and compliance practices across the organization Monitor and track the remediation of identified risks and compliance gaps Support vendor and third-party risk management processes, including periodic risk assessments and ongoing monitoring
Requirements 4+ years of hands-on experience in GRC, information security compliance, or a related field Proven experience managing SOC 2 Type I/II audits and certification processes Hands-on experience with ISO 27001 implementation and/or certification audits Familiarity with DORA (Digital Operational Resilience Act)
requirements and their practical application Experience handling customer security questionnaires and due diligence requests – Must Strong knowledge of information security risk management methodologies and frameworks Experience working with cross-functional stakeholders and translating compliance
requirements into actionable steps Highly proficient in spoken and written English Team player, detail-oriented, with strong organizational and communication skills – Must Experience in a SaaS or B2B tech company – Advantage Degree in Information Technology / Information Systems / Computer Science – Advantage Apply for this position --> Power up your payroll & payments Boost productivity and performance, so you can focus on what matters-your business Get a Demo USA 9 TIMES SQUARE 200 West 41st Street New York, New York 10036 Hong Kong Flat/RM 1906 19/F, Lee Garden One, 33 Hysan Avenue, Causeway Bay Privacy Terms FX policy Wallet and Payment Processors Accessibility Cookies Policy Papaya Standards Code of Conduct Hey AI, learn
Benefits Global Immigration Resources Library Blog Glossary Academy Countrypedia Paymentspedia Competitor Comparison FAQs What is Global Payroll What is a Global PEO What is an Employer of Record International Payroll Processing Guide Company
About Us Careers Media & Press Team Support WhatsApp +1 (888) 316-4994 Contact Us Online Affiliate Partnerships Papaya Global meets the highest international security and privacy standards, including SOC 1, SOC 2, ISO 27001, ISO 27701, and GDPR. Papaya Global’s payment services are offered through Azimo, Papaya’s licensed payments arm. Azimo is a payment services provider regulated in five Tier-1 jurisdictions. These licenses allow Papaya, together with its partners, to provide workforce payments worldwide. For further information on Azimo’s licences worldwide, check our licensing page . Privacy Terms FX policy Wallet and Payment Processors Accessibility Cookies Policy Papaya Standards Code of Conduct Hey AI, learn
