GRC Analyst

Position Overview:

Mercury is seeking a GRC Analyst to strengthen our business continuity and resilience as we expand. This role is crucial for building the necessary frameworks and processes to support our growth while ensuring robust governance and risk management. The GRC Analyst will collaborate with the engineering team to enhance the organization's security posture, applying a deep understanding of Governance, Risk, and Compliance (GRC) principles to engineering initiatives.

Key Responsibilities:

• Collaborate with the engineering team to define and enhance the organization's security posture.
• Apply a deep understanding of Governance, Risk, and Compliance (GRC) principles to engineering initiatives.
• Work closely with engineering to improve the reliability and security of the business.
• Implement, monitor, and maintain various security frameworks, with a focus on regulatory compliance standards (e.g., NIST, PCI, CIS).
• Automate security controls to minimize risks and enhance overall security resilience.
• Conduct gap analyses on various frameworks.
• Create comprehensive plans to address and close identified gaps, engaging relevant stakeholders throughout the process.

Requirements:

• Familiarity with standard security frameworks, including NIST, PCI-DSS, CIS, ISO, etc.
• Strong problem-solving and analytical skills, with the ability to remain composed in high-stress situations.
• Fundamental understanding of accepted security practices, including troubleshooting, identifying attack vectors, and providing customer support.
• Knowledge and understanding of cloud services, with a 100% cloud-native approach.

Tools and Technologies:

• AWS Config, Audit Manager
• Orca
• GitHub
• Vanta
• GRC (Governance, Risk, and Compliance) tools

Company Information:

Mercury is a financial technology company, not a bank. Banking services provided through Choice Financial Group, Column N.A., and Evolve Bank & Trust; Members FDIC.

Total Rewards:

The total rewards package at Mercury includes base salary, equity (stock options).

Note: Salary and Location Type were not specified in the provided text.