Logo for Paxos

GRC Analyst

Role overview

Qualifications

  • Experience in Governance, Risk, and Compliance (GRC), information security, IT risk management, or cybersecurity compliance roles.
  • Hands-on experience performing security risk assessments, control assessments, compliance and Privacy reviews.
  • Experience working with security frameworks and standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or similar regulatory requirements.
  • Experience supporting internal and external audits, including evidence collection, control validation, and remediation tracking.

Responsibilities

  • Support the development, implementation, and maintenance of governance, risk management, and compliance programs within the organization.
  • Assess security risks, monitor compliance with internal policies and external regulations, and coordinate audits.
  • Work with cross-functional teams, including Information Security, IT, Legal, Privacy, Internal Audit, and Business Operations to identify risks.
  • Track remediation activities and improve the organization’s overall risk and compliance posture.

About the company

Paxos logo

Paxos

Fintech: Finance + Technology

Paxos is building the foundation for the open financial system. We are a regulated blockchain infrastructure company building transparent and transformative financial solutions. We create accessible blockchain infrastructure that’s instantaneous and reliable, 24/7 - whether it’s enabling crypto features for enterprises, launching the world’s first fully-regulated, asset-backed tokens (USDP & PAXG), or setting a new standard of efficiency for settlement of securities. We empower today’s financial leaders to build a more open, trusted economy. These leaders include PayPal, Mercado Libre, Interactive Brokers and Mastercard.

Company details

Company typeSME
IndustryFintech: Finance + Technology
Company size201 - 500

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Applying to Paxos? Our only careers site is paxos.com/careers, and we only recruit via @paxos.com email. Details below.
___

About Paxos

Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it.

We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world’s leading financial institutions, like Mastercard, Visa, Robinhood, and PayPal.

About the team

The Governance, Risk & Compliance (GRC) Team is responsible for establishing and maintaining a strong framework to manage organizational governance, cybersecurity risks, regulatory requirements, and compliance obligations. The team works closely with business units, technology teams, and stakeholders to identify risks, implement controls, monitor compliance, and support continuous improvement of security and operational processes.

About the role

The GRC Analyst supports the development, implementation, and maintenance of governance, risk management, and compliance programs within the organization. The role involves assessing security risks, monitoring compliance with internal policies and external regulations, coordinating audits, and ensuring that appropriate controls are in place to protect business information and technology assets.

What you’ll do

The GRC Analyst works with cross-functional teams, including Information Security, IT, Legal, Privacy, Internal Audit, and Business Operations, to identify risks, track remediation activities, and improve the organization’s overall risk and compliance posture.

About you

Your experience should include:

  • Experience in Governance, Risk, and Compliance (GRC), information security, IT risk management, or cybersecurity compliance roles.

  • Hands-on experience performing security risk assessments, control assessments, compliance and Privacy reviews.

  • Experience working with security frameworks and standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or similar regulatory requirements.

  • Experience supporting internal and external audits, including evidence collection, control validation, and remediation tracking.

  • Experience developing, reviewing, and maintaining security policies, standards, procedures, and compliance documentation.

  • Experience managing risk registers, control matrices, audit findings, and corrective action plans.

  • Experience conducting third-party/vendor security risk assessments and reviewing supplier compliance documentation.

Important Notice for Paxos Applicants
Fraudulent accounts sometimes pose as Paxos recruiters on LinkedIn and other platforms, and fake websites sometimes impersonate our careers site. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information.

To verify a legitimate Paxos opportunity:

  • Our only official careers site is paxos.com/careers

  • We only use @paxos.com email addresses

  • We never ask for payment or financial details to apply, interview, or work here

  • For technical roles, we do not perform a coding interview without prior screening by our engineering team

Thanks for your interest in Paxos!

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Related jobs

Other jobs at Paxos

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.