Remote Senior Security GRC Analyst — Scale Compliance

Monarch Money; Covina (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Work anywhere, fully remote

Equity compensation

Home-office stipend

Location-based benefits

Unlimited PTO

3 day weekends each month

Job summary

Monarch Money is seeking a Senior Security GRC Analyst to lead our compliance and customer security assurance efforts in a fully remote fintech setting. You will partner with People, Legal, IT, Operations, and Engineering to mature our program and automate evidence collection.

You will own third-party risk, risk management reporting, and policy development while collaborating with leadership to scale security controls across the organization.

Qualifications

• 3–5 years building and scaling GRC or customer security programs in high-growth environments.
• Hands-on knowledge of IAM, endpoints, and cloud controls to discuss with auditors and engineers.
• Detail-oriented with strong document review and data accuracy.
• Excellent cross-functional collaboration across People, Legal, IT, Operations, Engineering, and leadership.
• Experience writing and updating security policies, standards, and procedures.
• Experience with SOC 2 audits and customer assurance questionnaires.
• Familiar with compliance platforms and continuous monitoring tools.
• Experience using AI tools (Claude, ChatGPT) for GRC workflows.
• Strong written communication for customer-facing security responses.

Responsibilities

• Mature our compliance framework: controls monitoring, training, evidence collection, audit coordination, findings closure.
• Automate GRC workflows and evidence gathering using platforms and AI tooling.
• Own third-party risk management: vendor assessments, risk tiering, approvals, monitoring.
• Develop and report risk management program including risk register and treatments.
• Write and maintain security policies and procedures as controls evolve.
• Scale customer assurance end-to-end: security questionnaires, evidence requests, trust center content.

Skills

GRC security

Compliance program design

Audit & controls

Cross-functional coordination

Policy writing & maintenance

SOC 2 familiarity

AI-assisted GRC workflows

Security documentation

Cloud & IAM controls

Tools

Vanta

Drata

OneLeet

SafeBase

Job description

Monarch Money is seeking a Senior Security GRC Analyst to lead our compliance and customer security assurance efforts in a fully remote fintech setting. You will partner with People, Legal, IT, Operations, and Engineering to mature our program and automate evidence collection.

You will own third-party risk, risk management reporting, and policy development while collaborating with leadership to scale security controls across the organization.