Security Analyst: Governance, Risk and Compliance - Analyst Program I

Fiserv • Sunnyvale, CA

1d • Onsite

About The Position

Calling all innovators - find your future at Fiserv. We're Fiserv, a global leader in Fintech and payments, and we move money and information in a way that moves the world. We connect financial institutions, corporations, merchants and consumers to one another millions of times a day - quickly, reliably, and securely. Any time you swipe your credit card, pay through a mobile app, or withdraw money from the bank, we're involved. If you want to make an impact on a global scale, come make a difference at Fiserv. Security Analyst: Governance, Risk and Compliance What does a successful Security Analyst-Governance, Risk and Compliance do? We are looking for a proactive GRC analyst to join our Technology Analyst Program. In this role, you will analyze application security controls, perform vendor risk assessments, and assist in testing internal frameworks (like SOC 2 or NIST). You will be a key player in ensuring our new and existing business applications remain compliant and resilient for our clients. What you will do: You’ll assist in evaluating third-party vendor assessments and documenting internal risks. Audit Support: Gathering evidence for audits like PCI or SOC 2. This might involve taking screenshots of system settings or pulling logs to prove that only authorized people have access to data. Policy Management: Reviewing and updating security policies example, updating the Remote Work Policy to include guidelines for using generative AI. Compliance Monitoring: Using GRC tools (like Archer, or ServiceNow) to track security rules are followed. Important info about this role: This role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity. You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered for this role. This is a full-time, direct-hire position, and no contract options for unsolicited agency submissions will be considered. All offers of employment are contingent on standard background checks. Fiserv and certain of its affiliated companies are federal, state, and/or local government contractors. Should this position support a Federal Government contract, now or in the future, the successful candidate will be subject to a background check conducted by the U.S. Government to determine eligibility and suitability for federal contract employment for public trust or sensitive positions. Positions that support state and/or local contracts also may require additional background checks to determine eligibility and suitability. Thank you for considering employment with Fiserv. Please: Apply using your legal name Complete the step-by-step profile and attach your resume (either is acceptable, both are preferable). Our commitment to Equal Opportunity: Fiserv is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, protected veteran status, or any other category protected by law. If you have a disability and require a reasonable accommodation in completing a job application or otherwise participating in the overall hiring process, please contact [email protected]. Please note our AskHR representatives do not have visibility to your application status. Current associates who require a workplace accommodation should refer to Fiserv’s Disability Accommodation Policy for additional information. Note to agencies: Fiserv does not accept resume submissions from agencies outside of existing agreements. Please do not send resumes to Fiserv associates. Fiserv is not responsible for any fees associated with unsolicited resume submissions. Warning about fake job posts: Please be aware of fraudulent job postings that are not affiliated with Fiserv. Fraudulent job postings may be used by cyber criminals to target your personally identifiable information and/or to steal money or financial information. Any communications from a Fiserv representative will come from a legitimate Fiserv email address. There's a reason why Fiserv is the global leader in information management and electronic commerce systems for the financial services industry. It's our people. If you are a talented professional who gets excited by the challenge of helping Fiserv lead the transformation of financial services technology for our clients' benefit, we encourage you to explore career opportunities with Fiserv, where turning possibilities into realities is the norm.

Requirements

• Recent graduate of a bachelor's degree completed in December 2024 or after in Computer Science, Data Science, Management Information Systems, Cybersecurity, Technical Project Management, or other Technology Degrees
• 3.0+ GPA
• 0-2 years of professional work experience
• General understanding of Governance, Risk and Compliance (GRC)
• Familiarity with PCI, NIST CSF, or SOC 2.
• Basic understanding of GCP Cloud security.
• General knowledge of GDPR or CCPA.
• Understanding the risks of LLMs (data leakage, prompt injection).
• Attention to Detail: You are the "quality control" for security.
• Can you explain a technical risk to engineering or legal teams.
• GRC involves tracking multiple small tasks simultaneously.
• You must currently possess valid and unrestricted U.S. work authorization to be considered for this role.

Nice To Haves

• Foundational experience in Android development (Android Studio, SDK components, and mobile UI basics).

Responsibilities

• Assist in evaluating third-party vendor assessments and documenting internal risks.
• Gathering evidence for audits like PCI or SOC 2. This might involve taking screenshots of system settings or pulling logs to prove that only authorized people have access to data.
• Reviewing and updating security policies example, updating the Remote Work Policy to include guidelines for using generative AI.
• Using GRC tools (like Archer, or ServiceNow) to track security rules are followed.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level