Senior Information Security GRC Analyst

Purpose Financial; Greenville (SC); Híbrido; USD 90 000 - 130 000; Tempo integral

Resumo da oferta

Purpose Financial is seeking an Information Security GRC Analyst III for our Greenville, SC hybrid team. You will own end-to-end audit readiness, drive certifications, manage risk, and partner across IT, Legal, and Internal Audit to protect customer data.

You will design, implement, and maintain GRC controls, lead SOC 2 Type II readiness, drive ISO 27001, maintain risk registers, and deliver executive dashboards showing our risk posture. Join a mission-driven fintech.

Qualificações

• 3-5+ years in information security GRC, compliance or audit.
• Hands-on SOC 2 Type II audits experience as auditee/owner/auditor.
• Knowledge of SOC 2, ISO 27001, NIST CSF, NIST SP 800-53 and CIS Controls.
• Strong written and verbal communication; policy writing ability.

Responsabilidades

• Design, implement, audit, and maintain GRC controls across the information security program.
• Own SOC 2 Type II readiness and certification end-to-end (evidence, testing, remediation, audits).
• Drive ISO 27001 certification and ISMS maintenance, including SoA reviews.
• Maintain risk registers, conduct risk assessments, and produce mitigation plans.
• Partner with IT, SecOps, Legal, and Internal Audit to operationalize controls.
• Leverage GRC platform automation for real-time control health and monitoring.
• Manage Third-Party Risk Management (TPRM) including vendor assessments.
• Deliver executive and Board dashboards on risk posture with clarity.
• Develop training and guidance to embed security culture.

Conhecimentos

GRC experience

SOC 2 Type II

ISO 27001

NIST CSF

Risk management

Policy writing

GRC platform

Communication

Descrição da oferta de emprego

Information Security GRC Analyst III | Greenville, SC (Hybrid) Purpose Financial | Full-Time

We are on a mission. We are intentional. We are Purpose Financial.

At Purpose Financial, we're not just building compliance programs - we're protecting the financial futures of millions of customers who count on us every day. We're an innovative consumer financial services company dedicated to improving financial mobility, and everything we do is driven by purpose.

We're looking for an Information Security GRC Analyst III who brings both the technical depth and the human-centered mindset to help us protect what matters most.

Find Your Purpose Here

This isn't just a GRC role - it's an opportunity to serve as the operational backbone of our compliance posture. You'll own end-to-end audit readiness, drive certifications, manage risk, and partner across the organization to ensure our customers' data is protected with the same care we bring to every decision we make.

If you're the kind of professional who thrives on structure, leads with integrity, and finds satisfaction in building programs that truly hold up under pressure - we want to hear from you.

What You'll Do

• Design, implement, audit, and maintain GRC controls across our information security program
• Own SOC 2 Type II readiness and certification from end to end - evidence collection, control testing, gap remediation, and auditor liaison
• Drive ISO 27001 certification and ongoing ISMS maintenance, including SoA reviews and management reviews
• Maintain risk registers, conduct risk assessments, and elevate material risks with actionable mitigation plans
• Partner with IT, SecOps, Legal, and Internal Audit to operationalize controls across access management, encryption, logging, and vulnerability management
• Leverage GRC platform automation for real-time control health visibility and continuous monitoring
• Manage our Third-Party Risk Management (TPRM) program, including vendor assessments and security questionnaires
• Deliver executive- and Board-level dashboards that tell the story of our risk posture with clarity and confidence
• Develop training and compliance guidance that empowers every business unit to own their part of our security culture

What You Bring

• 3-5+ years of experience in information security GRC, compliance, or audit roles
• Hands-on experience with SOC 2 Type II audits as an auditee, control owner, or auditor
• Working knowledge of SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, and CIS Controls
• Demonstrated ability to manage risk registers, assessments, and remediation tracking
• Strong written and verbal communication skills - you write policies as clearly as you write executive briefings
• A project-managed mindset that keeps multiple workstreams moving forward simultaneously
• Experience working within a GRC platform

Bonus Points For:

• Background in financial services, fintech, or consumer lending
• Familiarity with PCI DSS, GLBA, CCPA, or state-level financial privacy regulations
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor/Implementer

Why Purpose Financial?

We are proudly certified as a Great Place to Work and committed to building a dynamic, diverse workplace where every employee can reach their full potential. Whether it's the meaningful work, the collaborative culture, or the opportunity to grow - our team members choose Purpose Financial because they believe in what we're building together.

Where there's a need, there's a way. And right now, we need someone like you.

Purpose Financial is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Purpose Financial will not provide sponsorship for employment-based visas or immigration benefits for this position. Applicants must be legally authorized to work in the United States without requiring immigration sponsorship now or in the future.

Current or future (next 10 years) immigration sponsorship includes, for example: H-1B, E-3, TN, O-1, CPT, STEM OPT, or any immigration work authorization requiring a written submission from the company to a government agency or otherwise requiring the entry of the company as your immigration employer of record in government records.

Must be eligible to work in the USA and able to pass a background check