Senior Governance Risk & Compliance Regional Specialist - InfoSec

About the role

Airwallex is looking for a Senior Governance Risk & Compliance Regional Specialist for its Information Security function, based in Abu Dhabi. As the regional anchor, you will connect security requirements in the UAE with the wider global Information Security programme, working with regulators, customers, partners and vendors, and supporting regional entities while keeping their needs in front of the global team.

Key responsibilities

• Design, implement and monitor security controls, policies and procedures across international regulatory compliance, data privacy, risk and security governance.
• Use AI and automation to streamline compliance work, including reporting, communications, metrics, dashboards and evidence management.
• Build and maintain security documentation and evidence artefacts for internal and external stakeholders.
• Develop subject-matter expertise in regional security compliance requirements while contributing to the global Information Security programme.
• Apply practical security judgment to complex cloud environments and work independently across engineering, legal and business teams.
• Help evolve the compliance operating model as Airwallex scales across new markets and regulations.

Required profile

• 7+ years of cybersecurity experience, with a proven ability to work and execute independently.
• Experience creating and maintaining security policies adapted to complex regulatory requirements.
• Experience managing, implementing and monitoring security controls, including preparing for and supporting information security audits.
• Strong communication skills and confidence acting as a regional contact for regulators, customers, partners and vendors.
• Preferred: fintech experience, knowledge of security compliance in finance or the UAE, and experience applying AI and automation to compliance or security operations.

Required skills

• Deep knowledge of compliance and control frameworks such as PCI-DSS, ISO 27001 and SOC 2, and a strong understanding of what makes a successful information security audit.
• Working understanding of complex cloud environments and their impact on security and compliance.
• Working understanding of financial services or payments.
• Ability to work independently, manage projects and deliver initiatives without being bound to traditional methodologies.