Senior GRC & Security Automation Lead (Remote)

Monarch Money; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Remote work

Home office stipend

Unlimited PTO

3 day weekends every month

Job summary

Monarch Money is seeking a Senior Security GRC Analyst to join our Security team. You will own the day-to-day of our compliance program and customer security assurance while maturing the GRC program across the organization.

You'll work cross-functionally with People, Legal, IT, Operations, Engineering, and leadership, automating repetitive tasks and scaling the program as Monarch grows. This is a builder-operator role focused on precision.

Qualifications

• 3-5 years operating and scaling security GRC in high-growth environments.
• Hands-on security knowledge with designing technical controls (IAM, endpoint, cloud).
• Meticulous attention to detail for sensitive or content-heavy documents.
• Strong cross-functional coordination across People, Legal, IT, Ops, Engineering, leadership.
• Experience writing, maintaining security policies, standards, and procedures.
• Experience with SOC 2 or equivalent and customer assurance.
• Experience with compliance platforms and continuous controls monitoring.
• Experience leveraging AI tools for GRC workflows.
• Strong written communication for customer-facing security responses.

Responsibilities

• Own and mature our compliance framework: monitoring, training, evidence, audit coordination.
• Automate GRC: evidence collection, risk workflows, using compliance platforms and AI tooling.
• Own third-party risk management: vendor assessments, risk tiering, approvals, monitoring.
• Develop and maintain risk management program: risk register, assessments, reporting.
• Write and update security policies and procedures.
• Own and scale customer assurance end to end: security questionnaires, evidence requests, trust center content.

Skills

Security GRC

Compliance

Customer assurance

Cross-functional coordination

Policy writing

SOC 2

AI tooling

Auditing liaison

Tools

Vanta

Drata

Oneleet

SafeBase

Job description

Monarch Money is seeking a Senior Security GRC Analyst to join our Security team. You will own the day-to-day of our compliance program and customer security assurance while maturing the GRC program across the organization.

You'll work cross-functionally with People, Legal, IT, Operations, Engineering, and leadership, automating repetitive tasks and scaling the program as Monarch grows. This is a builder-operator role focused on precision.