GRC Security Analyst (Fintech)

TL;DR

GRC Security Analyst (Fintech): Monitoring and enforcing compliance with critical security frameworks and industry regulations to protect sensitive financial and property data. Focus on conducting comprehensive risk assessments, leading security audits, and developing remediation plans to maintain a robust security posture.

Location: Remote (US)

Salary: $114,000–$139,000

Company

hirify.global is a national real estate analytics and valuation technology company providing AI-driven data solutions to build confidence in real estate decisions.

What you will do

• Monitor and enforce compliance with security frameworks like NIST, ISO 27001, and SOC 2.
• Conduct comprehensive risk assessments to identify vulnerabilities and evaluate control effectiveness.
• Lead preparation and participation for internal and external security audits.
• Develop and adapt security policies in alignment with industry best practices and regulatory standards.
• Evaluate the security posture of third-party vendors to ensure contractual compliance.
• Define metrics to assess the success of the security program and report to leadership.

Requirements

• Minimum 5 years of experience in GRC, security compliance, or risk management.
• Must be based in the United States.
• Deep understanding of security frameworks (NIST, SOC 2, ISO 27001) and privacy regulations (GLBA, GDPR, CCPA).
• Relevant industry certifications such as CISSP, CISM, CISA, or CRISC.
• Working knowledge of cloud computing, DevOps, and application security.
• Advanced proficiency in data analysis and compliance reporting using spreadsheets.

Culture & Benefits

• Comprehensive medical, dental, and vision insurance.
• 401(k) retirement plan with employer match.
• Paid time off (PTO) and paid holidays.
• Access to virtual primary care and mental health resources.
• Career and skill development resources.
• Mission-driven environment focused on the real estate industry.