Sr. Security Analyst - Governance, Risk and Compliance - Prosper Remote Bookmark Share Print 176 0 0

Listing Description

About Us
Founded in 2005 as the first peer-to-peer marketplace lending platform in the U.S., Prosper was built on a simple idea: connect people who want to borrow money with those who want to invest. Since inception, Prosper has helped more than a million people gain access to affordable credit with over $23 billion in loans originated through its platform. Our mission is to help our customers advance their financial well-being through a variety of products including personal loans, credit, home equity lines of credit (HELOC), and our newest product, HELoan. Our diverse culture rewards accountability and cross functional teamwork because we believe this encourages innovative thinking and helps us deliver on our mission.  
 
We’re on a mission to hire the very best, and we are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere. It is important to us that every hire connects with our vision, mission, and core values. Join a leading fintech company that’s democratizing finance for all!  

About Our Technology Team
We are aggressively growing our Technology team to support our various financial products. The ideal candidate is passionate about learning the Fintech domain and delivering cutting-edge, high-quality solutions to solve business problems. We utilize a progressive, test-driven, Agile development methodology that places a high premium on communication, teamwork, sound design and clean implementation. 

Our Values
Diversity expands opportunities
Collaboration creates better solutions
Curiosity fuels our innovation
Integrity defines all our relationships
Excellence leads to longevity 
Simplicity guides our user experience 
Accountability at all levels drives results

COVID-19 Vaccination Policy
Prosper is continuing to grow our team during the COVID-19 pandemic, conducting fully remote hiring and onboarding processes. Our philosophy as a business is to approach the COVID-19 situation with empathy and urgency. Prosper’s top priority is the health and safety of our employees and of the communities we serve, including our customers, partners, prospects, and candidates. In accordance with this priority, along with our legal responsibility to provide and maintain a workplace that is safe and free of known hazards, we have adopted a COVID-19 Vaccination Policy which requires all of our employees to receive vaccinations, unless they have an approved accommodation.


The Role
Prosper is seeking a detail oriented, highly motivated, technology savvy and passionate security compliance professional with a desire to support, promote and further mature the company's security GRC program. 
 
Responsible in executing various security compliance initiatives such as risk assessments, security control audits and 3rd party risk assessments. You will use your strong communication, analytical and troubleshooting abilities to quickly identify and report on controls from various security domains, control and/or process gaps and to identify process and technology opportunities. 

Problems You Will Solve
  • Conduct periodic information security risk assessments 
  • Review, audit, and monitor security compliance programs against security policies, standards, and frameworks such as PCI-DSS, NIST-171, SOC2 II, etc. 
  • Support developing remediation plans for issues and risks, coordinate activities with owners, and track remediation to completion 
  • Assist in documenting, and maintaining the security control matrix 
  • Support the management of documentation such as security policies, standards, processes, procedures, and data flows 
  • Perform periodic user access reviews 
  • Lead evidence collection for external audits related to SOC1, SOC2 II, PCI-DSS, NIST 171, etc. 
  • Perform vendor security risk assessments 
  • Build and cultivate positive working relationships with stakeholders across various teams 
  • Approve user’s access request to systems and applications
  • Conduct security awareness training and phishing campaigns

  • About You
  • B.S. degree in Information Systems, Computer Science, , or any technology related field 
  • 7+ years of auditing internal controls, security audit, control framework/compliance, information security, and/or technology process experience 
  • Very high attention to detail, high integrity, and business ethics 
  • Excellent skills around troubleshooting, problem-solving, analytical thinking, and project management 
  • Basic knowledge in security technologies such as firewalls, IDS, DLP, Vulnerability Scanners, etc. 
  • Ability to work independently to achieve objectives and deliver results 
  • Experience in security standards/frameworks such as PCI-DSS, NIST, SOC 2 II, etc. 
  • CISSP, CISA, CISM or similar security certification is ideal 
  • Big 4 Consulting experience  preferred
  • Compensation
    The salary for this position is $122-$167k annually, plus bonus and generous benefits. In determining your salary, we will consider your location, experience, and other job-related factors.


    #IND1
    #LI-RC1
    #LI-Remote

    Applicants have rights under Federal Employment Laws.

    California applicants: please click here to view our California Consumer Privacy Act (“CCPA”) Notice for Applicants, which describes your rights under the CCPA: https://www.prosper.com/plp/legal/privacy-notice-for-applicants/

    At Prosper, we're looking for people with passion, integrity, and a hunger to learn. We encourage you to apply even if your experience doesn't precisely match the job description. Your unique skill set and diverse perspective will stand out and set you apart from other candidates. Prosper thrives with people who think outside of the box and aren't afraid to challenge the status quo. We invite you to join us on our mission to advance financial well-being.

    Prosper is committed to an inclusive and diverse workplace. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical​​​ condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law, including the San Francisco Fair Chance Ordinance. Prosper will consider for employment qualified applicants who are non-US citizens and will provide green card sponsorship.


    Listing Details

    • Citizenship: Not Provided
    • Incentives: Not Provided

     

    • Education: Not Provided
    • Travel: Not Provided
    • Telework: Not Provided



    About Us

    NinjaJobs is a community-run job platform developed by information security professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience.

    Our Contacts

    1765 Greensboro Station Pl.
    Suite 900
    Tysons Corner Va 22102

    (703) 594-7765