Senior Security GRC Analyst

Responsibilities

• Own and mature the compliance framework including continuous controls monitoring and audit coordination
• Automate GRC workflows using compliance platforms and AI tooling
• Manage the third-party risk management (TPRM) program and vendor security assessments
• Develop and maintain the risk management program and risk register
• Write and update security policies and procedures
• Scale customer assurance end to end including security questionnaires and trust center content

Requirements

• 3-5 years operating and scaling security GRC, compliance, or customer assurance programs
• Hands-on security knowledge in IAM, endpoint, and cloud infrastructure
• Meticulous attention to detail for sensitive documentation
• Strong cross-functional coordination skills
• Experience with SOC 2 or equivalent and customer assurance
• Experience with compliance platforms like Vanta, Drata, Oneleet, or SafeBase
• Experience leveraging AI tools such as Claude or ChatGPT
• Strong written communication skills

Preferred Qualifications

• Incident response or SOC/security operations background
• Auditor background from Big 4 or security audit firms
• Experience developing agents or tools for GRC workflows
• Experience supporting contract reviews from a security perspective
• Fintech or financial services background
• Relevant certifications such as CISSP, CISA, or CRISC

About the Company

Monarch is a powerful, all-in-one personal finance platform designed to help make the complexity of finances feel simple again. We are a fully remote company that embraces asynchronous work and uses AI as a core partner in our operations.