Security GRC Specialist

Sunbit•New York, NY

6h•$150,000 - $200,000•Hybrid

About The Position

We seek a Cybersecurity GRC & Project Management Specialist to join our growing team. In this role, you will be pivotal in safeguarding our company's data and systems, ensuring compliance with industry regulations, and fostering a security-conscious environment.

Requirements

Minimum 5 years of experience in cybersecurity, preferably within the financial services industry.
Strong understanding of cybersecurity frameworks (e.g., NIST CSF, PCI DSS, SOC 2).
Experience with security risk management, vendor risk management, and security awareness programs.
Proven project management skills, including experience with project planning, execution, and monitoring.
Excellent communication, collaboration, and interpersonal skills.
Ability to work independently and as part of a team.

Responsibilities

Maintain and extend our comprehensive cybersecurity program aligned with industry best practices and regulatory requirements (e.g., PCI DSS, SOC 2).
Establish and maintain a risk management framework to identify, assess, and prioritize cybersecurity risks.
Develop and maintain our security policies, procedures, and standards.
Manage and track cybersecurity risks, conduct threat assessments, and implement controls to mitigate risks.
Stay abreast of evolving regulations and industry standards, such as PCI DSS, SOC 2, GDPR, and HIPAA, and translate these requirements into actionable security practices for Sunbit.
Oversee internal audits and compliance assessments.
Evaluate and manage the security posture of third-party vendors, ensuring they adhere to Sunbit's security standards.
Develop and implement processes for vendor onboarding, risk assessment, and ongoing monitoring.
Design and deliver engaging security awareness training programs for employees at all levels.
Develop and maintain security awareness materials, such as newsletters, phishing simulations, and security posters.
Manage and oversee the implementation of security projects, ensuring they are completed on time, within budget, and meet project goals.
Work with cross-functional teams to prioritize and execute security initiatives.

Benefits

Join one of LA’s fastest growing startups (2023), A Most Loved Workplace, #576 on the 2023 Inc 5000 list, and Forbes Fintech 50 (2024)
Mission driven + empowered + collaborative
Competitive pay and stock options
Unlimited PTO
Health Insurance options including Medical, Dental, Vision, Life, EAP, FSA, & Parental Leave
Newly added HSA and Pet Insurance
401K Plan with Matching
Cell Phone Stipend
Casual Dress
Team based strategic planning + Team owned deliverables