Sr. GRC Analyst
Remote
Full Time
#Technology
#Engineering
#GRC
#PCI DSS
#NIST
#SOC
#AWS
#Azure
#GCP
#Python
#BASH
#PowerShell
At Prosper, we help people take control of their finances through innovative lending and savings tools that reach millions of customers. Our mission drives everything we do, and we are looking for a security compliance professional who can strengthen our Governance, Risk, and Compliance program while bringing fresh ideas for automation and process improvement.
About the Role
We are hiring a Sr. GRC Analyst on a Full Time basis. In this position you will combine traditional compliance work with a technical approach, using scripting and AI tools to reduce manual tasks and improve how we monitor controls across our cloud environments.
Key Responsibilities
- Review and monitor security compliance programs against frameworks such as PCI-DSS, NIST CSFv2, and SOC 1/2, applying automation to assess control effectiveness on an ongoing basis.
- Identify opportunities to integrate AI tools and large language models into risk assessments and regulatory documentation, speeding up analysis and process improvements.
- Lead automated evidence collection for external audits including SOC 1 and PCI Level 1, easing the workload on engineering and product teams.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cyber Security, or a related technical field.
- Five to seven years of GRC or Security Engineering experience, preferably in a SaaS, FinTech, or cloud-native environment.
- Strong understanding of cloud security compliance for AWS, Azure, and GCP.
- Hands-on experience writing scripts in Python, Bash, or PowerShell to parse logs, query APIs, and automate routine GRC tasks.
- Familiarity with AI productivity tools, prompt engineering, or large language models for documentation and data analysis.
- Practical experience with security standards and frameworks including PCI-DSS, NIST 800-53 or CSF, and SOC 1/2 Type II.
- Ability to explain technical risks clearly to non-technical stakeholders and work effectively across teams.
- Certifications such as CISSP, CISA, CISM, or CCSP are viewed favorably.
Location
This role is fully remote and open to candidates located anywhere.
Compensation and Benefits
We offer a competitive salary along with a 401(k) plan that includes a 5% company match. Additional benefits include comprehensive medical insurance, an annual wellness allowance, flexible time off, paid parental leave, access to Udemy for professional development, childcare assistance, pet insurance, and extra savings opportunities through Beneplace.
