Information Security Risk Analyst II | Acorns

Position Overview

Acorns is seeking an Information Security Risk Analyst II tasked with identifying, assessing, and managing security risks. This role requires expertise in cybersecurity, risk management, and regulatory compliance, coupled with a strong grasp of financial products. The ideal candidate will take ownership of risks and collaborate effectively with stakeholders across all levels of the organization.

Company Information

At Acorns, our mission is to look after the financial best interests of the up-and-coming, beginning with the empowering, proud step of micro-investing. Our values guide us, and our mission drives us. Come join us and help deliver financial wellness for the whole family, putting the tools of wealth-making into everyone’s hands.

Our Values:

• Lead With Heart: With compassion, integrity, and tenacity, inspire yourself and others to move past all previous thresholds of possibility.
• Make Bold Decisions: We are creating a new world. Be optimistic, adventurous, and courageous. Leap fearlessly into the future.
• Always Build Trust: Say what you mean, mean what you say, and do what you say you’re going to do. We are all owners. We are one team.
• Never Stop Growing: Change IS the constant. Stay hungry and curious. Be relentless in the pursuit of progress.
• Find a way: Never settle, no excuses, nothing is impossible. Just make it happen.

Employment Details

• Employment Type: Full-Time
• Location Type: Remote

Responsibilities

Risk Assessment and Analysis

• Conduct comprehensive risk assessments to identify vulnerabilities and potential threats.
• Analyze and prioritize risks based on Acorns' business context, impact, and likelihood.
• Provide actionable recommendations for risk mitigation.

Policy Development

• Develop, implement, and maintain security policies and procedures in line with industry standards.

Compliance and Audits

• Understand audit expectations and controls, and manage the independent audit engagements for Acorns.
• Support compliance activities for relevant regulations and frameworks, including GLBA, FINRA WSP, and Reg S-P.

Identity and Access Management

• Manage Identity and Access Governance.
• Conduct quarterly access reviews and periodic role certification by system owners.

Vendor Risk Management

• Conduct Vendor risk assessments and manage third-party risks.
• Perform annual vendor reviews.

Training and Awareness

• Develop and deliver training programs to enhance security awareness among employees.
• Foster a culture of security within the organization.

Collaboration and Communication

• Communicate risk assessment findings and recommendations to stakeholders and senior management in a manner that is consistent with Acorns’ business context.
• Demonstrate ownership of risks that includes communicating the business impact, performing risk assessment, prioritizing the risk, getting consensus with stakeholders, managing remediation/acceptance, and tracking over time.

Requirements

• Minimum of 4 years of experience in the Information Security / GRC domain.
• Strong understanding of security frameworks, risk management methodologies, and compliance standards.
• Sound analytical, problem-solving, and decision-making skills.
• Excellent communication and interpersonal skills, with the ability to effectively communicate complex security concepts to technical, non-technical, and management stakeholders.
• Hands-on experience with Security tools and Scripting will be a key differentiator.
• Hunger to deliver game-changing products.
• Exceptional drive and precision in delivery.
• A belief that your work is tied to your life's mission.
• Optimistic about the potential of societal change.

Note: You are not expected to have experience with all listed requirements. If you feel passionate about Acorns' mission, vision, and values, please apply.