Senior Security GRC Analyst

Job not on LinkedIn

🔥 9 hours ago

🇺🇸 United States – Remote

💵 $180k - $215k / year

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Monarch Money

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2016

💸 Finance

💳 Fintech

👥 B2C

Finance • Fintech • B2C

Monarch Money is an all-in-one money management platform designed to help users achieve financial clarity, confidence, and peace of mind. The platform allows users to track all their account balances, transactions, and investments in one place, and collaborate with partners or financial advisors at no extra cost. Monarch offers best-in-class data connectivity, syncing with multiple financial data aggregators to ensure all accounts are updated. It features advanced tools for budgeting, investment tracking, and financial goal management, utilizing AI for transaction organization. Available on web, iOS, and Android, Monarch emphasizes security, providing bank-level data protection. The platform is ad-free, focusing on enhancing users' financial life without distractions, and is highly rated for its user-friendly interface and comprehensive functionality, making it an ideal choice for personal finance management.

📋 Description

• Own and mature Monarch’s compliance framework, including continuous controls monitoring, security awareness training, evidence currency, audit coordination, evidence presentation, auditor calls, and finding closure • Automate GRC processes including evidence collection, questionnaire responses, risk management workflows, and compliance enforcement using compliance platforms and AI tooling • Own and scale the third-party risk management program, including vendor security assessments, risk tiering, approval workflows, and continuous monitoring • Develop, maintain, and mature the risk management program, including the risk register, risk assessments, treatment tracking, and leadership reporting • Write, maintain, and update security policies and procedures as the control environment evolves • Own and scale customer assurance end to end, including security questionnaires, evidence requests, trust center content, and knowledge base • Collaborate daily with People, Legal, IT, Operations, Engineering, and leadership • Automate repetitive work so the GRC program scales with company growth • Report to the Manager of Corporate and Infrastructure Security

🎯 Requirements

• 3–5 years operating and scaling security GRC, compliance, or customer assurance programs in high-growth environments, specifically security GRC • Hands-on security knowledge and experience designing and developing technical controls for IAM, endpoints, and cloud infrastructure • Meticulous attention to detail for sensitive or content-heavy documents • Strong cross-functional coordination across People, Legal, IT, Operations, Engineering, and leadership • Hands-on experience writing, maintaining, and updating security policies, standards, and procedures • Hands-on experience with SOC 2 or equivalent and customer assurance, including security questionnaires, evidence requests, and RFPs • Experience with compliance platforms and continuous controls monitoring, such as Vanta, Drata, Oneleet, or SafeBase • Experience leveraging AI tools such as Claude and ChatGPT for GRC workflows • Strong written communication for customer-facing security responses and audit documentation • Relevant certifications such as CISSP, CISA, or CRISC are nice to have • Incident response or SOC/security operations background is nice to have • Auditor background or internal audit lead experience is nice to have • Experience developing agents or tools for GRC workflows is nice to have • Experience supporting security-side contract reviews is nice to have • Fintech or financial services background is nice to have

🏖️ Benefits

• Competitive cash and equity compensation • Bonus opportunity • Stipend to set up an ideal working environment • Competitive benefit plans based on location • Medical, dental, and vision benefits in the US • Ability to contribute to a 401(k) plan in the US • Unlimited PTO • 3-day weekend every month via First Friday off • Fully remote work with no central office • Flexible choice of home, coworking space, or elsewhere