Security GRC Analyst
About The Position
Euronet Worldwide is hiring a Security Governance, Risk, and Compliance (GRC) Analyst to support its Gaming division and work directly with a gaming partner in Las Vegas. Gaming is the primary focus, with opportunities to support Ria, CoreCard, epay, EFT Americas, and Euronet Services LLC. This is a hands-on individual contributor role focused on maintaining audit-ready security programs, coordinating with technical teams to resolve control gaps, and demonstrating compliance with customer security commitments. The analyst owns and improves day-to-day security GRC activities across assigned business units. The role leads readiness and evidence collection for SOC and internal audits, supports ISO 27001 and PCI assessments, tracks corrective actions through closure, and serves as a point of contact for auditors, control owners, and business leaders. The analyst also coordinates risk and vendor reviews, maintains security policies and procedures, prepares reports and dashboards, and supports security awareness initiatives. The position collaborates with global GRC leadership and uses tools, including AI, to streamline recurring work.
Requirements
- A degree in information technology or a related field.
- At least 3 years of experience in security GRC, IT audit, technology risk, or compliance program management.
- Working knowledge of one or more frameworks or requirements such as PCI DSS, SOX, SOC, ISO 27001, or NIST CSF.
- Experience coordinating audits, collecting and reviewing evidence, and tracking control remediation.
- A current certification in IT, IT audit, or information security.
- Ability to participate in technical discussions and clearly explain security controls, risks, and compliance requirements to technical and business audiences.
- Strong organizational and relationship-building skills, with the ability to manage competing priorities across business units and distributed teams.
- Curiosity about emerging technology, security, and gaming regulations.
- Fluency in English.
Nice To Haves
- CISA, CISM, or an ISO/IEC 27002-related certification.
- Hands-on experience with OneTrust, Hyperproof, or a similar GRC platform.
- Experience supporting PCI DSS audits or assessments.
- Familiarity with gaming regulations or experience in payments, financial services, or another regulated industry.
Responsibilities
- Own and improve day-to-day security governance, risk, and compliance activities across assigned business units.
- Lead readiness and evidence collection for SOC and internal audits, support ISO 27001 and PCI assessments, and track corrective actions through closure.
- Serve as the primary point of contact for auditors, control owners, and business leaders.
- Partner with IT, Engineering, Legal, Privacy, Procurement, and Audit to clarify responsibilities and resolve control gaps.
- Identify and track security risks, contribute to enterprise risk assessments, and coordinate vendor security reviews and follow-up in OneTrust.
- Translate customer and contractual security requirements into internal controls and evidence demonstrating how commitments are met.
- Maintain security policies, procedures, and technical guidelines.
- Prepare dashboards, reports, and presentations using tools such as Hyperproof, OneTrust, and Fence.
- Support security awareness initiatives, including phishing simulations, training follow-up, and policy acknowledgments.
- Collaborate with global GRC leadership on shared initiatives and use AI and other tools to streamline recurring work.
Benefits
- 401(k) plan with 6% match
- Health, dental, and vision insurance
- Employee Stock Purchase Plan
- Company-paid life insurance
- Company-paid disability insurance
- Tuition reimbursement
- Paid time off
- Paid volunteer days
- Paid holidays
- Casual office attire
- Additional employee perks and incentives
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
