SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Airwallex is a unified payments and financial platform serving over 250,000 global businesses including Brex, Rippling, Navan, and Qantas. The company operates across 27 offices globally with 2,300+ employees and is valued at $11 billion, backed by leading investors including Sequoia, Visa, and Mastercard.
As a Senior GRC Specialist for APAC, you will serve as a regional anchor for Airwallex's Information Security team, focusing on governance, risk, and compliance across Asia-Pacific markets. Reporting to the Senior GRC Manager, you will act as the primary regional contact for regulatory bodies, customers, partners, and vendors, managing external perception of enterprise security.
Key responsibilities include: implementing and monitoring security controls across your designated regions while integrating with global efforts; developing and maintaining security documentation including standards, policies, reporting metrics, and audit evidence; becoming a subject matter expert on regional compliance requirements; and leveraging AI and automation to streamline compliance work and reporting.
You will work largely remotely, coordinating with the Information Security team and cross-functional stakeholders on international regulatory compliance, data privacy, and security governance. The role requires deep knowledge of compliance frameworks (PCI-DSS, ISO 27001, SOC2), strong familiarity with information security concepts and practices, and working knowledge of policy creation in security contexts. An ideal candidate has either an IT engineering or technology-focused legal background with practical security skills, or extensive experience working closely with engineering teams on security matters.
This is a dynamic, autonomous role requiring strong project management skills, self-reliance, and the ability to view compliance and security as iterative challenges rather than checkbox exercises. You will be comfortable speaking with regulatory entities, delivering required information, and designing policies that balance regional standards with global industry norms.
