Senior Governance, Risk, and Compliance Analyst

Role Overview

As a Senior Governance, Risk, and Compliance (GRC) Analyst, you will help support and mature Prosper’s GRC program. You’ll use your security-framework expertise to automate compliance workflows, improve processes, and work closely with cross-functional teams.

Key Missions

• Automate manual compliance workflows, evidence trails, and data collection.
• Identify opportunities to use AI / LLMs to accelerate risk assessments.
• Lead and automate evidence collection for external audits, including SOC 1 and PCI Level 1.

Requirements

• 5–7 years of experience in GRC or Security Engineering (preferably in SaaS, FinTech, or cloud-native environments).
• Strong technical and scripting skills:
  • Hands-on use of the command line and scripting languages such as Python, Bash, and PowerShell.
  • Ability to parse logs, query APIs, and automate repetitive GRC tasks.
• Fluency with security standards and frameworks, including:
  • PCI-DSS
  • NIST (800-53/CSF)
  • SOC 1 / SOC 2 Type II
• Ability to clearly communicate technical risk to non-technical stakeholders and collaborate strategically across teams.
• B.S. in Computer Science, Information Systems, Cybersecurity, or a related field.
• Solid understanding of cloud security compliance across AWS, Azure, and GCP.

Nice to Have

• Security certifications such as CISSP, CISA, CISM, CCSP, or similar.
• Experience with AI productivity tools, prompt engineering, or LLMs to improve documentation and data analysis.