{"id":3466573,"url":"https://alion.io/job/whitebit-grc-specialist","title":"GRC Specialist","company":{"id":175925,"name":"WhiteBIT","domain":"whitebit.com","url":"https://alion.io/company/whitebit","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-08T13:56:01Z","employer_posted_date":null,"last_verified_at":"2026-10-08T13:56:01Z","board_verified":false,"closed_at":null,"days_open":26,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":26},"description":"We are the creators of a new fintech era!\n\nOur mission is to revolutionize the world by making blockchain technology accessible to everyone in everyday life. WhiteBIT is a global team of more than 1,500 professionals united by a shared vision of shaping the future.\n\nWe are building our own blockchain ecosystem to ensure maximum transparency and security for over 8 million users worldwide. Our cutting-edge solutions, rapid adaptation to market challenges, and technological excellence set us apart from traditional companies.\n\nOur official partners include Juventus, FC Barcelona, Lifecell, FACEIT, and VISA.\n\nJoin us as an Quantitative Researcher. \n\nRequirements:\n\n4–6+ years of experience in Information Security, GRC, Risk Management, Compliance, IT Audit, or a related field.\n\nStrong practical knowledge of information security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, CCSS or similar.\n\nExperience working with applicable regulatory requirements such as NIS2, DORA, GDPR, or other relevant regulations.\n\nHands-on experience conducting information security risk assessments, control assessments, gap analyses, and compliance reviews.\n\nExperience supporting or coordinating internal and external audits, certifications, and regulatory assessments.\n\nAbility to independently manage compliance initiatives, track remediation activities, and follow up with control owners.\n\nExperience developing, reviewing, and maintaining security policies, standards, procedures, controls, and related documentation.\n\nUnderstanding of common information security domains, including access management, vulnerability management, incident management, third-party risk, business continuity, cloud security, and data protection.\n\nExperience working with third-party/vendor risk assessments and security due diligence.\n\nExperience responding to customer security questionnaires, RFIs/RFPs, or customer compliance requests.\n\nAbility to translate regulatory, contractual, and security requirements into clear and actionable controls for technical and business teams.\n\nStrong stakeholder management skills and experience collaborating with Security, IT, Engineering, Legal, Privacy, Procurement, and business teams.\n\nStrong analytical skills and ability to identify, assess, document, and communicate security and compliance risks.\n\nExcellent written and verbal communication skills, including the ability to explain GRC topics to both technical and non-technical stakeholders.\n\nStrong organizational skills and ability to manage several compliance, risk, and audit activities in parallel.\n\nAbility to work independently, prioritize effectively, and take ownership of GRC activities from identification through remediation and closure.\n\nProfessional working proficiency in English.\n\nNice to have:\n\nExperience in SaaS, cloud-based, technology, or other highly regulated environments.\n\nExperience with GRC platforms or compliance automation tools such as ServiceNow GRC, OneTrust, Vanta, Drata, AuditBoard, or similar.\n\nFamiliarity with cloud platforms such as AWS, Azure, or GCP from a governance and compliance perspective.\n\nRelevant professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.\n\nExperience participating in or leading compliance improvement and control maturity initiatives.\n\nResponsibilities:\n\nOwn and coordinate day-to-day GRC activities across information security, risk management, compliance, and assurance.\n\nConduct information security risk assessments, identify control gaps, document risks, and track remediation actions with relevant owners.\n\nSupport the implementation, maintenance, and continuous improvement of security and compliance frameworks such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.\n\nMonitor relevant regulatory and contractual requirements and help translate them into practical security controls and compliance activities.\n\nCoordinate and support internal and external audits, certification activities, customer assessments, and regulatory reviews.\n\nMaintain and improve security policies, standards, procedures, control documentation, risk registers, and other GRC documentation.\n\nPerform control assessments and periodically evaluate the effectiveness of implemented security controls.\n\nTrack audit findings, compliance gaps, risks, and remediation plans through to closure.\n\nSupport third-party and vendor security risk assessments, including due diligence and ongoing risk reviews.\n\nManage and respond to customer security questionnaires, security reviews, and compliance-related requests in collaboration with relevant teams.\n\nPartner with Security, IT, Engineering, Legal, Privacy, Procurement, and business stakeholders to ensure security and compliance requirements are understood and implemented.\n\nProvide guidance to control owners on compliance requirements, risk treatment, evidence collection, and remediation activities.\n\nIdentify opportunities to improve and automate GRC processes, evidence collection, reporting, and compliance monitoring.\n\nDevelop and maintain GRC metrics, dashboards, and reporting to provide visibility into risks, compliance status, audit findings, and remediation progress.\n\nSupport security awareness and compliance initiatives where relevant.\n\nStay informed about changes in security standards, regulations, and industry practices and assess their potential impact on the organization.\n\nWorking terms\n\nImmerse yourself in Crypto & Web3:Master cutting-edge technologies and become an expert in the most innovative industry.\n\nWork with the Fintech of the Future:\n\nDevelop your skills in digital finance and shape the global market.\n\nTake Your Professionalism to the Next Level:\n\nGain unique experience and be part of global transformations.\n\nDrive Innovations:\n\nInfluence the industry and contribute to groundbreaking solutions.\n\nJoin a Strong Team:\n\nCollaborate with top experts worldwide and grow alongside the best.\n\nWork-Life Balance & Well-being:\n\nModern equipment.\n\nComfortable working conditions, and an inspiring environment to help you thrive.\n\n24 calendar days of paid leave.\n\nAdditional days off for national holidays.\n\nWith us, you’ll dive into the world of unique blockchain technologies, reshape the crypto landscape, and become an innovator in your field. If you’re ready to take on challenges and join our dynamic team, apply now and start a new chapter in your career!\n\nLet’s Build the Future Together!","description_format":"text","description_chars":6475,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Cryptocurrencies","Crypto Exchanges"],"lifecycle":[{"event":"open","at":"2026-10-29T15:24:45Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.824,"p_room":0.75,"age_days":25,"expected_fill_days":28,"reasons":["seen:25","velocity","win:late"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/whitebit-grc-specialist","json_url":"https://alion.io/job/whitebit-grc-specialist.json","meta":{"generated_at":"2026-11-03T23:05:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":140,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175925},"rest":"https://alion.io/mcp/rest/get_company?id=175925"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwhitebit-grc-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwhitebit-grc-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwhitebit-grc-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/whitebit-grc-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwhitebit-grc-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3466573}},{"tool":"search_jobs","arguments":{"company":"whitebit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3466573},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}