GRC Associate – Contract

Vaga não está no LinkedIn

🔥 17 horas atrás

🌵 Arizona, California, +14 estados a mais – Remoto

🌵 Arizona – Remote 🏄 California – Remote ⛰️ Colorado – Remote 🥔 Idaho – Remote 🌽 Illinois – Remote 🌪️ Kansas – Remote 🏖️ New Jersey – Remote 🗽 New York – Remote 🌲 Oregon – Remote 🦀 Maryland – Remote 🍂 Massachusetts – Remote 🔔 Pennsylvania – Remote ⚓ Rhode Island – Remote 🤠 Texas – Remote ☕ Washington – Remote 🍑 Georgia – Remote

💵 $50 - $65 / hora

⏰ Tempo Integral

🟢 Júnior

🟡 Pleno

🚔 Conformidade

🚫👨‍🎓 Sem graduação necessária

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Publicada recentemente.
• As vagas desta empresa costumam ser preenchidas em 83 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Unit21

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2018

💳 Fintech

🔒 Cibersegurança

📋 Conformidade

💰 $34.000.000 Series B em 2021-07

Fintech • Cybersecurity • Compliance

A Unit21 é uma plataforma personalizável projetada para transformar operações de prevenção a fraudes e combate à lavagem de dinheiro (AML). Ela permite que as organizações executem lógica de detecção personalizada, automatizem investigações e gerenciem de forma integrada a conformidade regulatória. Com recursos como prevenção de fraudes em pagamentos em tempo real, monitoramento de transações e gestão automatizada de casos, a Unit21 oferece soluções abrangentes que se adaptam às necessidades únicas de negócios, garantindo segurança e eficiência no espaço de tecnologia financeira.

Descrição

• Run day-to-day GRC work in Drata, including control mapping, integration connections, gap closure and evidence collection • Coordinate SOC 2 Type II audit activities, including auditor coordination, evidence requests, walkthroughs, exception tracking and remediation • Run biannual and quarterly PCI reviews and track external scan findings to closure • Prepare recurring SOC 2 evidence, including access and group reviews, audit-log exports and incident summaries • Track postmortem follow-ups and control gaps across Engineering, Infra/DevOps, IT, HR and People Ops • Respond to security questionnaires, DDQs and customer vendor-risk reviews • Maintain the security answer library and obtain Security sign-off for new or changed security claims • Build customer screenshot evidence packs and maintain the Trust Center • Review customer security requirements in MSAs and DPAs and maintain the requirements tracker • Run annual security policy reviews and manage the policy exceptions log • Coordinate the annual risk assessment, maintain the risk register and prepare leadership risk reviews • Coordinate the annual BCP/DR test and write the customer-facing summary • Track HR-side SOC 2 controls, including background checks, security training, onboarding and offboarding • Conduct security assessments of internal-use and non-critical vendors and support critical vendor and subprocessor reviews • Maintain the subprocessor list and drive customer notifications when it changes • Run intake and review for new SaaS apps, OAuth apps, AI tools and MCP servers • Handle day-to-day compliance for data-provider reseller agreements, starting with LexisNexis • Build and manage a compliance calendar of recurring controls, reviews, audits and renewals • Send a monthly GRC status report to the Head of Security

🎯 Requisitos

• 2–4 years in GRC, security compliance or IT audit, ideally at a B2B SaaS company selling to regulated customers • Supported at least one SOC 2 Type II audit, including evidence collection, control testing and auditor requests • Answered customer security questionnaires or DDQs • Clear writing; customer-facing answers should need only light review • Organized and persistent, able to track many small asks across teams and follow up without escalation • Hands-on experience with a compliance automation platform such as Drata, Vanta, Secureframe or OneTrust • Fintech, BaaS or banking-vendor experience • ISO 27001 experience • AI governance experience, including NIST AI RMF or ISO 42001 • PCI DSS exposure • Security+, CISA or ISO 27001 Implementer certification • US work location in one of: AZ, CA, CO, GA, ID, IL, KS, MA, MD, NJ, NY, OR, PA, RI, TX, WA • Availability for approximately 20 hours per week and at least 4 hours of overlap with US Pacific time

🏖️ Benefícios

• Competitive salary and pre-IPO equity • 100% company-paid medical, dental, and vision insurance for employees • Unlimited PTO and generous leave programs • 401(k) • Learning & development stipend • Home office setup support • Flexible hours within the week • Renewable 6-month initial contract term • 30 days' notice to end contract

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo