GRC Program Manager

Astra is building mission-critical infrastructure for moving money at scale. We provide APIs and automation tools that enable businesses to move money programmatically while maintaining strict regulatory requirements.

Requirements

• 3–6+ years of experience in governance, risk, compliance, audit, or information security rolls.
• Hands-on experience supporting or leading SOC 1 and/or SOC 2 audits; experience with PCI DSS and ISO 27001 is strongly preferred.
• Strong working knowledge of compliance frameworks (SOC, ISO 27001, NIST CSF, PCI DSS) and how controls operate in practice.
• Experience working cross-functionally with engineering, product, and operations teams in a technical environment.
• Proven ability to build and maintain high-quality documentation, evidence, and audit artifacts.
• Bachelor’s degree in Information Systems, Computer Science, Business, Risk Management, or related field (or equivalent practical experience).

Benefits

• Competitive compensation with equity in a growing fintech company.
• Remote-first culture with flexible working arrangements
• Small team, big impact — your work directly supports Astra’s ability to scale responsibly
• Professional growth opportunities in compliance and risk management
• Mission-driven — build infrastructure that powers financial innovation while meeting the highest regulatory standards