Senior Security Analyst GRC

Join nesto, a Deloitte Fast 50 company, and work on building the mortgage ecosystem of the future. As a Senior Security Analyst GRC, you will own day-to-day and strategic operation of the compliance automation platform (Vanta) and lead external audits end-to-end for SOC 2, SOC 1, ISO 27001 and future certifications.

Requirements

• 5–8 years of experience in Security GRC, IT audit, internal audit, security compliance, or risk assurance
• Strong hands-on experience leading audits and certifications (SOC 2, SOC 1, ISO 27001); ISO 27017 / ISO 27018 experience is a plus
• Proven ability to build or mature internal audit / internal controls practices
• Strong experience with compliance automation tools (Vanta, Drata, Anecdotes, Tugboat Logic)
• Excellent ability to write and maintain policies, standards, and processes that teams can follow
• Strong organizational skills and attention to detail
• Strong stakeholder management skills and ability to drive remediation to closure
• Scripting/automation experience (Python, PowerShell, Bash, APIs, SQL) is a strong plus

Benefits

• Comprehensive insurance
• Unlimited access to telemedicine and mental health services
• 4 weeks of vacation