• Manage security and compliance programs • Maintain Knak’s security control framework and oversee continuous monitoring and remediation efforts • Drive security awareness and behavior change • Educate control owners, deliver training, and promote best practices across the organization • Collaborate with internal and external partners • Work closely with product, engineering, leadership, auditors, and vendors to support security workflows • Maintain and improve security documentation • Develop and manage policies, standards, procedures, and internal handbooks • Support Governance, Risk, and Compliance (GRC) activities • Monitor metrics, contribute to reporting, and provide visibility into security and compliance health

Role Description The Enterprise GRC (Governance, Risk, and Compliance) team functions as a second line of defense, responsible for developing and maintaining Enterprise Technology (ET) risk management and compliance in alignment with the organization's aligned framework. As regulatory landscapes grow more complex and cybersecurity threats continue to evolve, the need for a robust GRC framework has become mission-critical to the business. The Cyber GRC Compliance & Certification Service Manager sits at the intersection of cybersecurity, regulatory compliance, and business operations — ensuring the organization maintains and demonstrates adherence to industry standards, regulatory requirements, and internal security policies. This role will lead efforts to continuously strengthen the organization's compliance posture across relevant frameworks (e.g., ISO 27001, SOC 2, NIST CSF, GDPR, CCPA, etc.) by managing certification lifecycles and serving as a key liaison between technical teams, auditors, and business stakeholders. - Audit & certification lifecycle management: Directs the end-to-end lifecycle of internal cybersecurity audits and compliance certifications, serving as the primary liaison for auditors while maintaining continued alignment with ISO27001, NIST CSF, SOC 2, CCPA and GDPR. - Certification expansion & readiness: Develops and executes a multi-year certification roadmap while driving continuous readiness through proactive gap analyses, mock audits, and a centralized, continuous evidence repository mapped to business and regulatory demands. - Certification risk assessment & mitigation: Leads enterprise risk assessments, including internal self-risk assessments to identify compliance gaps, maintaining a continuous risk register with clear mitigation timelines while driving cross-functional corrective actions (CAPAs) through verified closure. - Stakeholder Partnership & Governance: Partners cross-functionally with engineering, legal, IT, cybersecurity, and business leadership to embed audit readiness into daily operations, translating complex regulatory requirements into actionable guidance while continuously updating security policies and control narratives. - Automation & Continuous Improvement: Optimizes GRC tooling to automate compliance processes and continuous control monitoring, streamlining evidence collection while tracking emerging regulations to proactively adapt the certification roadmap. - Reporting to Leadership: Delivers executive-level compliance metrics and risk dashboards that track certification roadmap progress, audit statuses, and open findings, providing leadership with the actionable visibility needed to support strategic decision-making. Qualifications - Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or equivalent professional experience. - At least 5+ years of experience in cybersecurity compliance, GRC, IT audit, or certification management. - Demonstrated hands-on experience managing initial certification, scope expansion, and annual/surveillance audits, such as ISO 27001, SOC2, NIST CSF, or similar. - Proven experience building and maintaining audit readiness programs, including continuous evidence management processes. - Proficiency with GRC platforms/tools for evidence, control management, and continuous monitoring (e.g., Archer GRC, ServiceNow GRC, OneTrust). - Exceptional verbal and written communication skills to effectively translate technical issues to non-technical audiences. - Experience directly interfacing with external auditors/certification bodies and managing audit logistics. - Strong program management skills with the ability to balance multiple concurrent audit timelines. Preferred Qualifications - Active industry credential certification such as ISO 27001 lead auditor/implementer, CISA, CRISC CISSP, or CISM. - Strong knowledge of NIST or ISO, and familiar with global data privacy regulations including GDPR, CCPA, and their intersection with technology risk management. - Experience operating within a three-line-of-defense(3LOD) risk governance model, particularly within a second-line GRC/risk oversight function. - Prior experience managing certification scope expansion (e.g., adding new sites, business units, or product lines to an existing certification with business/IT alignment). - Familiarity with continuous control monitoring (CCM) approaches and GRC tool compliance features. - Experience managing relationships with multiple certification bodies/external audit firms simultaneously. - Background in leading mock audits or internal audit programs. Benefits - Immediate medical, dental, vision and prescription drug coverage. - Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more. - Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more. - Vehicle discount program for employees and family members and management leases. - Tuition assistance. - Established and active employee resource groups. - Paid time off for individual and team community service. - A generous schedule of paid holidays, including the week between Christmas and New Year’s Day. - Paid time off and the option to purchase additional vacation time.

• Design, build, and operate the security controls for Atlan’s corporate environment: macOS fleet, SaaS applications, corporate identities (Okta/Google Workspace), email, endpoints, and network edge. • Evaluate, select, deploy, and operate the corporate security stack: EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, browser security. You will own vendor selection, PoCs, deployment, tuning, and lifecycle management. • Define and enforce security baselines, hardening standards, and configuration policies across all corporate platforms. • Drive vulnerability management for corporate assets: patch orchestration, risk-based prioritization, exception tracking, and SLA enforcement. • Build security automation and internal tooling. We expect you to use LLMs (Claude, custom agents) to accelerate security workflows. • Lead security reviews of new SaaS adoptions, corporate infrastructure changes, and IT projects. • Define what it means to operate safely in an environment where AI agents act autonomously across corporate systems. • Own the Corporate Security roadmap. Align investments to Atlan’s risk register, compliance calendar, and growth trajectory. • Provide technical direction and security guidance to IT Operations on endpoint provisioning, network design, SaaS lifecycle management, and access controls. • Partner with Detection & Response on telemetry coverage, detection engineering, and incident handling for corporate-sourced events. • Collaborate with Infrastructure Security and AppSec teams to ensure security standards are consistent across corporate and production environments. • Support compliance programs (ISO 27001, ISO 42001, SOC 2, HIPAA, GDPR) by ensuring corporate security controls satisfy audit evidence requirements. • Communicate security posture, risks, and investment needs to Security leadership and cross-functional stakeholders clearly and persuasively.

Title: Senior Technology and Security Auditor Location: Leawood KS US Job Description: Euronet Worldwide, Inc. is a leading provider of financial payment solutions with a global presence. Euronet has built a unique network of networks that drives transactions in the global payments landscape through diverse cash-based and digitally driven services for consumers and businesses. We are seeking a Senior Technology and Security Auditor who can independently plan, execute, and document technology audits across complex, global environments. This role is best suited for a candidate who can identify and evaluate technology and security risks, prepare clear audit documentation, communicate practical findings, and work directly with key stakeholders, including application developers, security engineers, technology leaders, process owners, and external auditors. - Lead the planning, execution, and documentation of General IT Controls (GITC) audits in partnership with business process owners and external auditors. - Drive the continued development and execution of the company's IT, cybersecurity, and operational audit programs, identifying opportunities to enhance audit coverage, efficiency, and risk management. - Partner with business leaders, IT, and security teams to identify technology and cybersecurity risks, evaluating the design and effectiveness of internal controls across the organization. - Serve as the organization's subject matter expert for SOX General IT Controls (GITCs), providing guidance to IT and security process owners on control design, risk identification, and remediation strategies. - Participate in pre-deployment reviews of internally developed applications and technology solutions to evaluate control design and implementation before production. - Prepare high-quality audit documentation, including process narratives, flowcharts, risk and control matrices, control design assessments, testing workpapers, and substantive testing documentation that supports audit conclusions and withstands internal and external review. - Prepare and present clear, well-supported audit findings and recommendations that communicate the condition, criteria, root cause, associated risk, and practical remediation actions to process owners and senior leadership. - Partner with process owners to develop, monitor, and validate remediation plans, coordinating follow-up activities and testing to ensure timely resolution of audit findings. - Build strong working relationships with internal stakeholders, external auditors, and business leaders to support enterprise risk assessments, internal audits, and regulatory compliance initiatives. - Perform operational audits, process reviews, internal investigations, and other special projects as requested by management. - Leverage data analytics, automation, and Artificial Intelligence (AI) to improve audit effectiveness, expand testing coverage, identify emerging risk trends, and enhance the quality of audit evidence. - Support the growth of the Internal Audit function by assisting with the recruitment, onboarding, mentoring, and professional development of Internal Audit team members. Requirements - Bachelor's degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, or a related field - 2–6 years of experience in public accounting, internal audit, or IT audit, with a strong focus on SOX General IT Controls (GITCs), IT risk, and information security testing - Experience evaluating and auditing a variety of technologies, security tools, IT infrastructure, and system development methodologies, including both commercial (vendor) software and internally developed applications - Experience preparing comprehensive audit documentation, including process narratives, flowcharts, risk and control matrices (RCMs), control design assessments, and audit testing workpapers - Experience partnering with internal and external auditors, business stakeholders, and IT teams throughout the audit lifecycle - Proven ability to collaborate effectively in a fast-paced, cross-functional environment - Strong quantitative, analytical, critical thinking, and problem-solving skills, with the ability to evaluate technology risks and identify practical solutions - Demonstrated ability to identify root causes of control deficiencies, assess risk, apply professional skepticism, and develop practical, well-supported recommendations - Excellent written, verbal, and presentation skills, with the ability to communicate effectively with both technical and non-technical audiences - Strong organizational, project management, and time management skills, with the ability to manage multiple priorities and work independently in a hybrid or remote work environment - Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, and other business productivity tools - The ability to travel domestically and internationallyup to 20% - Fluent in English Preferred Requirements: Experience evaluating and testing cybersecurity controls, including: - Identity and Access Management (IAM) - Privileged Access Management (PAM) - Vulnerability Management - Security Monitoring and Incident Response - Data Protection Controls - Security Governance Frameworks - Experience planning and executing SOX 404 General IT Controls (GITC) audit - Experience assessing controls within cloud environments (Azure, AWS, or Google Cloud Platform), identity management platforms, cybersecurity programs, and DevOps environments - Professional certifications such asCPA, CISA, CIA, ISO 27001 Lead Auditor, NIST Cybersecurity Framework (CSF), or related credentials, or a commitment to obtain certification after joining - Experience within the financial services, fintech, or other highly regulated industries, including the design, implementation, or assessment of technology and security controls - Experience partnering withexternal auditors to support SOX compliance, integrated audits, or other regulatory engagements - Experience using data analytics, reporting, automation, and Artificial Intelligence (AI)tools to improve audit efficiency, testing, and reporting - Public accounting and/or consulting experience - Ability to communicate effectively in one or more additional languages is a plus Benefits - 401(k) Plan - Health/Dental/Vision Insurance - Employee Stock Purchase Plan - Company-paid Life Insurance - Company-paid disability insurance - Tuition Reimbursement - Paid Time Off - Paid Volunteer Days - Paid Holidays - Casual Office Attire - Plus many more employee perks & incentives! We are an Equal Opportunity Employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, or national origin, age, disability status, genetic information, protected veteran status, or any other characteristic protected by law.