GRC Analyst III - SOC 2/ISO 27001 Expert

Advance America, Cash Advance Centers, Inc.; Greenville (SC); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Competitive wages

401(k) savings with company match

Company paid holidays

Tuition reimbursement

Business casual environment

Rewards & Recognition program

Employee Assistance Program

Downtown Greenville office with free 2

Job summary

Purpose Financial, Inc. seeks an experienced Information Security GRC professional to design, audit, and maintain governance and controls across SOC 2 Type II, ISO 27001, and CIS/CSS frameworks.

You will manage risk assessments, evidence collection, and third‑party oversight in a fast‑paced fintech environment. You will collaborate with IT, SecOps, Legal, and Internal Audit to ensure audit readiness and continuous compliance across multiple business units, while guiding policy development and

Qualifications

• Bachelor’s degree in Information Security or equivalent experience.
• 3–5+ years of experience in information security GRC, compliance, or audit roles.
• Hands-on experience with SOC 2 Type II audits (as auditee, control owner, or auditor).
• Strong written communication skills and ability to produce policy documents, audit evidence, and executive reports.
• Experience with GRC platforms and managing remediation tracking.

Responsibilities

• Maintain and evolve information security policies, standards, and controls mapped to SOC 2, ISO 27001, NIST, and CIS.
• Conduct risk assessments and maintain risk registers with structured evidence for mitigation.
• Own end-to-end audit preparation for SOC 2 Type II and ISO 27001 certification, including testing and evidence collection.
• Coordinate with IT, SecOps, Legal, Internal Audit, and stakeholders to protect company information assets.
• Develop training and reporting to drive control adoption and audit readiness.

Skills

SOC 2 Type II audits

GRC platforms

Policy & risk reporting

Written communication

Project management

Education

Bachelor’s degree in Information Security

Tools

GRC platforms

Job description

Purpose Financial, Inc. seeks an experienced Information Security GRC professional to design, audit, and maintain governance and controls across SOC 2 Type II, ISO 27001, and CIS/CSS frameworks.

You will manage risk assessments, evidence collection, and third‑party oversight in a fast‑paced fintech environment. You will collaborate with IT, SecOps, Legal, and Internal Audit to ensure audit readiness and continuous compliance across multiple business units, while guiding policy development and