Remote GRC Engineer - Cloud & Application Security

Description:

• Define and implement the overall strategy for One’s Information Security program
• Identify control gaps and lead initiatives to remediate such gaps
• Design, oversee, and execute information security risk management processes
• Define security standards and policies, perform internal and external security assessments, identify and manage security risks, and support audits
• Evaluate the security posture of cloud infrastructure and application security designs
• Ensure compliance with frameworks such as SOC 2 and PCI DSS controls
• Proactively evaluate security configurations of applications and AWS services
• Determine remediation plans for security gaps and work with stakeholders to resolve them
• Define, publish, and maintain company-wide security standards and requirements
• Perform security assessments of third-party hosted applications and systems
• Collaborate on security reviews of new product features, system architectures, and business processes
• Support information security audit initiatives and compliance projects
• Provide guidance and training to internal teams on information security, AWS security, and compliance
• Engage with technology and business teams as a consultant for security-related issues

Requirements:

• 5+ years of experience in security governance, cloud and application security assessments, risk management, and/or third-party risk
• Strong knowledge of industry standard frameworks such as NIST, FFIEC, SOC 2, PCI DSS, HiTrust, etc
• Thorough knowledge of enterprise-scale security architecture, cloud security, and application security best practices
• Domain knowledge of IT systems, networking, security, and compliance
• Familiarity with containerization technologies and CI/CD pipelines
• Excellent written and verbal communication skills
• Strong analytical and problem-solving skills
• Relevant certifications such as AWS Certified Security Specialty, CISSP, or CCSP are a plus

Benefits:

• Competitive cash salary ranging from $175,000 to $190,000 annually
• Benefits effective on day one
• Early access to a high potential, high growth fintech
• Generous stock option packages in an early-stage startup
• Remote-friendly (anywhere in the US) and office-friendly
• Flexible time off programs including vacation, sick, paid parental leave, and paid caregiver leave
• 401(k) plan with match