GRC Operations Specialist

As a GRC Operations Specialist at Fireblocks, you will oversee the implementation and progress of Governance, Risk, and Compliance programs that protect a platform trusted by major financial institutions, banks, and Web3 companies worldwide. Reporting to the GRC Director, you will drive day-to-day GRC operations with a focus on Third Party Risk Management and Employee Awareness programs, while leveraging AI tools to modernize how these programs run.

What you'll do

• Own, manage, and continuously improve the company's Third Party Risk Management (TPRM) program to align with security standards, best practices, business requirements, and SLAs.
• Own, manage, and continuously improve the company's security awareness program, ensuring its scope, content, cadence, and performance remain aligned with current expectations and business needs.
• Manage ongoing GRC operations including project management and tracking, financial planning and reporting, and annual and periodic planning.
• Drive GRC efficiency through innovation and automation, using AI tools such as chatbots, AI assistants, and AI-assisted development as primary levers for data-driven decision making and research.
• Support ongoing GRC operations such as internal and external audits, risk assessments, certification processes, policy management, and business continuity programs.

What you bring

• Minimum 3+ years of experience in cybersecurity or GRC.
• Proven experience in cyber, IT, or third party risk management.
• Proven experience in security awareness, including development and implementation of security training programs and testing such as phishing, vishing, and social engineering simulations.
• Strong understanding of industry best practices, regulations, frameworks, standards, and certifications such as SOC 2, ISO, NIST, CIS, DORA, and GDPR.
• Demonstrated, hands-on fluency with AI tools in your daily workflow, including AI chatbots and assistants, and comfort with AI-assisted development such as building scripts, automations, or internal tools.
• A visionary, innovation-driven mindset capable of implementing security and compliance programs in complex, fast-paced organizations.
• Exceptional communication, collaboration, and interpersonal skills, with the ability to engage both technical and non-technical audiences.
• Strong analytical and problem-solving skills with attention to detail, capable of managing multiple projects simultaneously and meeting tight deadlines.

Nice to have

• Experience with GRC software and utilities such as compliance management, policy management, risk management, vendor management, awareness, training, and phishing simulation platforms.
• Background in the financial or digital assets sector.
• Good technological understanding and familiarity with product development practices.

About Fireblocks

Fireblocks provides the simplest and most secure platform and network for companies to work with digital assets. The company is trusted by major financial institutions, banks, globally-recognized brands, and Web3 companies worldwide, including BNY Mellon, BNP Paribas, ANZ Bank, and Revolut.