Senior Information Security Specialist
The Senior Information Security Specialist at Wolt will be instrumental in advancing the company's global security and privacy compliance risk program. This role involves designing and implementing a comprehensive compliance change management framework to identify and address evolving security, privacy, regulatory, contractual, and framework obligations across Wolt's diverse markets and products. The specialist will collaborate closely with various teams, including Engineering, Legal, Privacy, Product, IT, Procurement, Internal Audit, and business units, to ensure that compliance requirements are effectively integrated into Wolt's operations.
Key responsibilities include maintaining a structured overview of Wolt's compliance landscape, conducting compliance impact assessments for new regulations and product initiatives, and facilitating risk workshops with cross-functional stakeholders. The specialist will translate complex regulatory and security requirements into actionable control expectations, identify and address control gaps, and support the maturation of Wolt's risk register and compliance reporting mechanisms. Additionally, the role involves harmonizing control mappings across various frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS, GDPR, UK GDPR, NIS2, DORA, and emerging AI governance requirements.
The ideal candidate will have over six years of experience in governance, risk, and compliance (GRC), security compliance, technology risk, privacy compliance, IT audit, or related fields, preferably within a global technology, marketplace, SaaS, fintech, or payments environment. They should have a proven track record in managing global compliance frameworks or security/privacy compliance programs, and experience in developing and operating compliance change management processes. Strong facilitation skills for risk assessments and workshops, along with a solid understanding of security and privacy frameworks, are essential.
Wolt offers a dynamic and challenging work environment where employees are encouraged to learn, build, and ship more than in most other companies. The company values self-starters with drive and entrepreneurial spirit, providing opportunities for significant impact and professional growth. As part of the global security team, the specialist will contribute to shaping a next-generation infrastructure that is hardened from the ground up, with no legacy tech or off-the-shelf product solutions.