Security Risk Governance Analyst: Drive Compliance

Chime Financial, Inc

San Francisco (CA)

On-site

USD 105,000 - 145,000

Full time

4 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Bonus

Equity package

Benefits

Job summary

Chime is hiring a Security Risk Governance Analyst to strengthen how the company identifies, assesses, and manages security risk across third-party ecosystems and internal controls. You’ll collaborate with Security, Risk, Compliance, Engineering, and Infrastructure teams to move assessments to written decisions and ensure efficient processes.

The base salary ranges from $105,000 to $145,000, with eligibility for a bonus, equity, and benefits.

Qualifications

2–4 years of experience in security, IT audit, risk, or compliance in a regulated environment.
Hands-on experience with third-party security reviews, risk assessments, or controls testing.
Professional experience in information security, risk, or security program management.
Experience with vulnerability management tooling and risk exceptions lifecycle.

Responsibilities

Run third-party security reviews end to end: due diligence, evidence collection, vendor interviews, ongoing monitoring.
Support SOX ITGC, PCI DSS, SOC 2, ISO 27001 with audit prep, evidence collection, and walkthrough coordination.
Conduct risk assessments, gap analyses, and controls testing; record findings and track remediation to closure.
Lead quarterly user access reviews for SOX/SOC 2/PCI/ISO 27001; manage population builds and evidence retention.