Sr. GRC Analyst

Award-winning Company Culture

We prioritize high-touch collaboration and flexibility. Whether you are working from our San Francisco or Phoenix offices or joining us as a fully remote team member, we provide the digital-first tools and intentional culture to keep you synced and supported.

What You'll Be Doing

• Automated Compliance Monitoring: Review, audit, and monitor security compliance programs against frameworks like PCI-DSS, NIST CSFv2, and SOC 1/2, leveraging automation tools to continuously assess control health.
• Process Optimization & AI Integration: Identify opportunities to leverage AI tools and LLMs to accelerate risk assessments, summarize complex regulatory requirements, and streamline process improvements.
• Code-Assisted Evidence Collection: Lead and automate evidence collection for external audits (SOC 1, PCI Level 1), reducing manual overhead for engineering and product teams.
• Identity & Access Management (IAM): Oversee user access management and quarterly user access reviews, exploring ways to automate provisioning audits and detect anomalies.
• Cross-Functional Collaboration: Build and cultivate positive working relationships with engineering, DevOps, and product stakeholders to bake compliance directly into the CI/CD pipeline and cloud infrastructure.

Requirements

• Education: B.S. degree in Computer Science, Information Systems, Cyber Security, or a related technical field.
• Experience: 5–7 years of GRC or Security Engineering experience, ideally within a SaaS, FinTech, or Cloud-native company.
• Cloud Security: Solid understanding of Cloud Security compliance (AWS/Azure/GCP).
• Technical & Scripting Skills: Hands-on working experience with command line and scripting languages (Python, Bash, Powershell, etc.) to parse logs, query APIs, and automate repetitive GRC tasks.
• AI Savvy: Familiarity with utilizing AI productivity tools, prompt engineering, or LLMs to optimize documentation, drafting, or data analysis.
• Framework Fluency: Experience with security standards/frameworks such as PCI-DSS, NIST (800-53/CSF), and SOC 1/2 Type II.
• Soft Skills: Strong ability to clearly articulate technical risk to non-technical stakeholders and strategically collaborate cross-functionally.
• Certifications: CISSP, CISA, CISM, CCSP, or similar security certifications are a plus.

Benefits

• Competitive Salary: $136k - $169k annually, plus bonus.
• 401(k) with a 5% company match.
• Flexible Time Off.
• Paid Parental Leave.
• Annual Wellness Allowance.
• Comprehensive Health Coverage.
• Udemy Access.
• Childcare Assistance.
• Pet Insurance.
• Additional Savings through Beneplace.

Pay & Schedule

The salary for this position is $136k - $169k annually, plus bonus and generous benefits. In determining your salary, we will consider your location, experience, and other job-related factors.

Qualifications

We are looking for self-driven candidates who want to be part of an innovative FinTech company with a mission to improve the financial well-being of its customers.