Senior Security GRC Analyst (Fintech)

Location: Remote, work from anywhere. Synchronous collaboration is mostly from 9 AM–2 PM PT, with asynchronous work across time zones.

Salary: $180,000–$215,000 per year, plus equity and bonus.

Company

hirify.global is a personal finance platform launched in 2021 that simplifies financial management for its members.

What you will do

• Own and mature the security compliance framework, including continuous controls monitoring, security awareness training, evidence management, audit coordination, and remediation tracking.
• Automate evidence collection, questionnaire responses, risk workflows, and compliance enforcement using compliance platforms and AI tools.
• Own the third-party risk management program, including vendor assessments, risk tiering, approvals, and continuous monitoring.
• Develop and maintain the risk register, assessments, treatment tracking, reporting, security policies, standards, and procedures.
• Scale customer security assurance through questionnaires, evidence requests, trust center content, and knowledge base materials.
• Coordinate daily with People, Legal, IT, Operations, Engineering, and leadership.

Requirements

• 3–5 years of experience operating and scaling security GRC, compliance, or customer assurance programs in high-growth environments, specifically security GRC.
• Hands-on knowledge of technical security controls, including IAM, endpoint security, and cloud infrastructure.
• Experience with SOC 2 or equivalent frameworks, customer security questionnaires, evidence requests, and RFPs.
• Experience writing and maintaining security policies, standards, and procedures.
• Experience with compliance platforms and continuous controls monitoring such as Vanta, Drata, Oneleet, or SafeBase.
• Strong cross-functional coordination, attention to detail, and written communication for customer-facing responses and audit documentation.

Nice to have

• Incident response or SOC/security operations experience.
• Auditor or internal audit lead experience.
• Experience developing agents or tools for GRC workflows.
• Security support for contract reviews and customer redlines.
• Fintech or financial services experience; CISSP, CISA, CRISC, or equivalent certification.

Culture & Benefits

• Fully remote work with no central office and flexibility to work from home, a coworking space, or elsewhere.
• Cash and equity compensation in an early-stage, high-growth product company.
• Stipend for setting up a preferred working environment.
• Location-based employee benefit plans, including US medical, dental, vision, and 401(k) options.
• Unlimited PTO and a three-day weekend every month through First Friday.

Hiring process

• Recruiter video call followed by a hiring manager video call.
• Take-home assignment and a virtual onsite round with 2–4 interviews.
• Reference checks followed by an offer.