Grc Analyst

Summary

Join Mercury, a rapidly growing financial technology company, as a GRC Analyst to contribute to building a robust and resilient security posture. You will collaborate with the engineering team, apply GRC principles to engineering initiatives, and improve business reliability and security. Responsibilities include conducting gap analyses on various frameworks, creating plans to address identified gaps, and engaging stakeholders. The ideal candidate possesses strong problem-solving skills, understands security frameworks (NIST, PCI, CIS, ISO), and has knowledge of cloud services. Mercury offers a competitive total rewards package including base salary, equity, and benefits.

Requirements

• Familiarity with standard security frameworks, including NIST, PCI-DSS, CIS, ISO, etc
• Strong problem-solving and analytical skills, with the ability to remain composed in high-stress situations
• Fundamental understanding of accepted security practices, including troubleshooting, identifying attack vectors, and providing customer support
• Knowledge and understanding of cloud services, with a 100% cloud-native approach

Responsibilities

• Collaborate with the engineering team to define and enhance the organization's security posture
• Apply a deep understanding of Governance, Risk, and Compliance (GRC) principles to engineering initiatives
• Work closely with engineering to improve the reliability and security of the business
• Implement, monitor, and maintain various security frameworks, with a focus on regulatory compliance standards (e.g., NIST, PCI, CIS)
• Automate security controls to minimize risks and enhance overall security resilience
• Conduct a gap analysis on various frameworks
• Create a comprehensive plan to address and close these gaps, engaging relevant stakeholders throughout the process

Benefits

• Base salary
• Equity (stock options)
• Benefits