SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Monarch Money is seeking a Senior Security GRC Analyst to join its Security team, reporting to the Manager of Corporate and Infrastructure Security. This is a builder-operator role focused on owning and maturing the company's compliance program and customer security assurance function while scaling the overall GRC program.
Key responsibilities include: owning the compliance framework with continuous controls monitoring, developing security awareness training, managing evidence currency and audit coordination; automating GRC workflows using compliance platforms and AI tooling; owning the third-party risk management (TPRM) program including vendor assessments, risk tiering, and continuous monitoring; developing and maintaining the risk management program with risk registers, assessments, and leadership reporting; writing and updating security policies and procedures; and scaling customer assurance end-to-end including security questionnaires, evidence requests, and trust center content.
You'll work daily with People, Legal, IT, Operations, Engineering, and leadership, automating repetitive work to enable program scaling. The role requires 3-5 years of hands-on GRC, compliance, or customer assurance experience in high-growth environments, with deep security knowledge of technical controls (IAM, endpoint, cloud infrastructure). Essential skills include meticulous attention to detail, strong cross-functional coordination, hands-on experience with SOC 2 and customer assurance, proficiency with compliance platforms (Vanta, Drata, Oneleet, SafeBase), and leveraging AI tools for GRC workflows. Strong written communication for customer-facing security responses and audit documentation is critical.
Nice-to-haves include incident response or SOC background, auditor experience (Big 4 or security audit firms), developed GRC agents/tools, contract review experience, fintech/financial services background, and relevant certifications (CISSP, CISA, CRISC).
Monarch is a fully remote company founded in 2021, offering an all-in-one personal finance platform. The team collaborates synchronously 9 AM–2 PM PT with asynchronous work across time zones. Benefits include competitive cash and equity compensation, work-from-anywhere flexibility, home office stipend, location-based benefits (US: medical, dental, vision, 401k), unlimited PTO, and a monthly 3-day weekend (First Friday off).
