Senior Security & GRC Engineer

TheGuarantors is a cutting edge fintech company setting the standard in rent coverage with unrivaled insurance products, with a deep understanding of owner, operator, and renter needs. We believe renters deserve better access to the home of their dreams and operators deserve greater protection and growth opportunities. That’s why we’re leveraging our expertise in real estate and using AI-based technology to help operators qualify renters faster while mitigating the risk of rental income loss. With $2B+ in rent and deposits guaranteed, we have been named one of Inc. 5000’s fastest-growing companies, one of Forbes’ Best Startup Employees, and one of Deloitte’s 2023 Technology Fast 500.
We are seeking a dynamic Security & GRC Engineer to join our team. In this role, you'll be at the forefront of designing and implementing automation for key regulatory and compliance activities. You'll challenge and expand our thinking on engineering, security, and governance, risk, and compliance (GRC) while promoting the importance of security controls and their value to the business. This is a unique opportunity to help shape our security landscape by enhancing our compliance platform, driving continuous improvement, managing cybersecurity alerts, overseeing network management, and preparing for critical audits.
If you are passionate about bridging the gap between GRC and engineering, have a strong grasp of regulatory requirements, and thrive in a collaborative, fast-paced environment, we would love to hear from you.
This role is based in the NYC office and will be on site 3-4 days per week. Responsibilities

• Design and implement automation for key regulatory and compliance activities 

• Challenge and expand our thinking surrounding engineering, Security and GRC

• Promote and demonstrate the relevance and importance of security controls and how they provide business value

• Expand the utilization of our Compliance Platform within the business 

• Contribute to improving our continuous improvement activities including integrating best practices for GRC systems 

• Triage and remediate Arctic Wolf alerts

• Triage and remediate CyberHaven Data Loss Prevention alerts

• Fill out and address Cybersecurity Questionnaires and Inquiries

• Security Awareness Training and Phishing Simulations

• Quarterly Access Control Audit

• Preparing for a SOC 1 Type I readiness assessment and SOC 1 Type II audit in tandem with the Finance team.

• Managing Okta, Google Workspace, Duo, and Nira from a Security perspective

• Managing and building our on-site Okta RADIUS server to enhance on-site network security

• General on-site Network Management

• Acts as a mentor to other Security & GRC Engineers

You are excited about this opportunity because:

• You are enthusiastic about bridging the gap between GRC and Engineering 

• You have demonstrated knowledge of large data handling and systems integration 

• You have knowledge of various regulations and controls (SOC 2 Type II, SOX, PCI, CCPA, GDPR, etc) 

• You are excited about developing and growing our Security and GRC Engineering capabilities 

• You have a passion for risk management, information security, metrics, efficient security operations, and effective control designs 

• Visualizing Security and GRC data for people to consume and use effectively is something you are good at doing 

To be successful in this role, we are looking for individuals that:

• Are passionate about staying up-to-date with government regulations and security frameworks.

• Have the ability to learn things quickly and become proficient in a short period of time.

• Can connect the dots around the business value of control automation, testing, and effectiveness 

• Operate within an environment of ambiguity and create clarity 

• Participate in risk management, decision-making, and collaborative discussions 

• Can communicate with clarity (written and verbal) 

• Understand relevant data collection, data cleaning, and data analysis techniques

• Utilize your experiences to help drive changes within our programs 

• Develop templates and instructional materials to help your fellow team members 

• Monitor and identify opportunities to improve the effectiveness and quality of our program 

• Manage and execute against key deliverables

Benefits

• Opportunities to make an impact within a fast growing company

• Medical, dental, & vision insurance, beginning day one

• Health savings account with employer contribution

• Generous PTO and paid holidays

• Flexible working hours

• 401(k)

• Paid parental leave

• Company sponsored short and long term disability

• Flexible spending accounts (healthcare, dependent care, commuter)

• Competitive salary

Base Salary

The base salary range is between $90,000 - $100,000 annually.

Base salary does not include other forms of compensation or benefits. Final offer amounts are determined by multiple factors, including prior experience, expertise, location and current market data and may vary from the range above.

Stay in Touch

Does this role not quite match your skills, but you’re still interested in what we're doing? Stay In Touch and apply to our Dream Job to be one of the first to hear about future opportunities!

TheGuarantors is an Equal Opportunity Employer. We celebrate diversity and are committed to an inclusive environment for all.