GRC Program Manager

Stelle nicht auf LinkedIn

🕒 vor 2 Monaten

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mails für Remote-Jobs erhalten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Astra Finance

WebsiteLinkedInAlle Stellen

11 - 50 Mitarbeiter

💳 Fintech

💸 Finanzen

☁️ SaaS

Fintech • Finance • SaaS

Astra Finance ist eine All-in-One-Zahlungsplattform, die eine API zur Verarbeitung von sofortigen Zahlungen zwischen Bankkonten und Karten bereitstellt. Sie ist für Produktteams konzipiert, die sichere und schnelle Zahlungslösungen einbetten möchten, während das Risiko von Betrug und Ausfällen minimiert wird. Mit Funktionen wie sofortigen Auszahlungen, Auszahlungsmöglichkeiten und beschleunigten ACH-Überweisungen bietet Astra Finance eine Full-Stack-Zahlungsverarbeitungslösung und ist somit die ideale Wahl für Fintech-Unternehmen, die ihre Zahlungsinfrastruktur optimieren möchten.

Beschreibung

• Own day-to-day execution of SOC 1, SOC 2, PCI DSS, and ISO 27001 readiness and audit cycles. • Develop and maintain policies, procedures, risk assessments, control narratives, and supporting documentation that meet auditor expectations and scale with the business. • Map controls across SOC, ISO, PCI, and NIST frameworks to identify overlap, gaps, automation opportunities, and control maturity improvements. • Facilitate risk assessments for systems, vendors, products, and business initiatives. Maintain risk registers, mitigation plans, and executive reporting on residual risk. • Partner with engineering and infrastructure teams to translate security requirements into practical technical controls across cloud infrastructure, SDLC, access management, logging, monitoring, and incident response. • Manage vendor security reviews, questionnaires, evidence validation, risk scoring, and ongoing monitoring for critical third parties and partners. • Support customer security reviews, security questionnaires, and trust documentation that enable enterprise sales and bank partnerships. • Help build scalable compliance workflows, tooling, and automation to reduce manual effort and improve evidence quality as Astra grows. • Maintain dashboards and reporting on audit status, control health, remediation progress, and risk posture for leadership.

🎯 Anforderungen

• 3–6+ years of experience in governance, risk, compliance, audit, or information security roles. • Hands-on experience supporting or leading SOC 1 and/or SOC 2 audits; experience with PCI DSS and ISO 27001 is strongly preferred. • Strong working knowledge of compliance frameworks (SOC, ISO 27001, NIST CSF, PCI DSS) and how controls operate in practice. • Experience working cross-functionally with engineering, product, and operations teams in a technical environment. • Proven ability to build and maintain high-quality documentation, evidence, and audit artifacts. • Comfort operating in fast-moving environments where priorities evolve and ambiguity is common. • Ambition to structure and systems 0 to 1, and comfort in creating frameworks, templates, and playbooks that scale. • Experience collaborating with Product, Sales, and Engineering teams to align on priorities and drive outcomes.

🏖️ Vorteile

• Competitive compensation with equity in a growing fintech company. • Remote-first culture with flexible working arrangements. • Professional growth opportunities in compliance and risk management. • Mission-driven — build infrastructure that powers financial innovation while meeting the highest regulatory standards.