We are redirecting you to the source. If you are not redirected in 3 seconds, please click here.

Information Security Compliance Program Manager at Galileo Financial Technologies. . Location: San Francisco, CA - Remote. Employee Applicant Privacy Notice. . Who we are:. . Welcoming, collaborative and having the opportunity to make an impact - is how our employees describe working here.  Galileo is a financial technology company that provides innovative and revolutionary software products and services that power some of the world's largest Fintechs. We are the only payments innovator that applies tech and engineering capabilities to empower Fintechs and financial institutions to unleash their full creativity to achieve their most inspired goals. Galileo leads its industry with superior fraud detection, security, decision-making analytics and regulatory compliance functionality combined with customized, responsive and flexible programs to accelerate the success of all payments companies and solve tomorrow's payments challenges today. . We hire energetic and creative employees while providing them the opportunity to excel in their careers and make a difference for our clients. Learn more about us and why we work here at . https://www.galileo-ft.com/working-at-galileo. .. About The Role. . The Governance, Risk, and Compliance (GRC) team handles a wide range of cross-functional activities, from security compliance certifications and audits, to risk management, inbound and outbound due diligence, third party risk management, security awareness, policy and procedures, and more.. . Each of these ongoing parallel activities entails interpreting and setting requirements, assessing the effectiveness of security controls, risk-based decision making, cross-functional collaboration and communication, and staying up-to-date on security best practices and how changes in the evolving threat landscape need to inform our strategy.. . We are seeking an experienced Security Compliance Program Manager responsible for monitoring and governing security controls in the cloud based on regulatory/compliance requirements and industry standards. Candidates must be able to assimilate knowledge quickly, understand stakeholder’s business challenges/risks, and act as a trusted advisor to lead change, policy adoption and monitor compliance against policies and standards.. .  . . Key job responsibilities:. . . Own and manage ongoing cybersecurity audits and assessments including SOC 2, GLBA, NYDFS, SOX, and other regulatory or client-driven reviews. . . . Serve as the primary liaison between internal stakeholders (i.e. Cybersecurity, Technology, Internal Audit, HR, Legal, etc.) and external auditors, regulators, and third-party assessors. . . . Monitor compliance with cybersecurity policies and standards and assess security compliance risks for bank scoped products, processes and technologies. . . . Partner with stakeholders to conduct walkthroughs and create process maps for critical cybersecurity processes, facilitating in risk and control identification and ensure the environment is operating safely and in control. . . . Translate technical controls and requirements into audit-ready evidence, and work with technical teams to align implementations with compliance expectations. . . . Support regulatory, third party attestation, and Internal Audit, audit readiness activities, ensuring control design and execution meet internal policy and external regulatory standards. . . . Communicate clearly and effectively with both technical and non-technical audiences, including executives, control owners, and external assessors.. . .  . . Minimum qualifications. . . BS degree in Computer Information Systems or related field. . 7+ years of experience with security GRC initiatives. . Experience with regulatory cybersecurity compliance examinations. . Substantive and current knowledge of transaction banking compliance, consumer and commercial lending, deposit, wires, cards and privacy regulations applicable to banks. . . . Experience with onboarding and monitoring cybersecurity controls in cloud environments specifically AWS. . . . Experience managing SOC2, PCI DSS, SOX ITGC, GLBA or other compliance standards and framework programs. . . . Strong knowledge of security risk management and running audits/certification programs. . Self-starter with strong interpersonal and communication skills. . Demonstrate ability to assimilate new knowledge quickly. . Comfortable working in a fast-paced, dynamic environment, and managing multiple projects concurrently. . . . Experience with managing programs in GRC tools. . .  . . Preferred qualifications. . . Banking/Fintech, Big 4, or management/IT consulting experience. . Direct experience with regulatory cybersecurity compliance examinations. . Relevant certification (e.g. CISA, CISSP, PCI QSA, AWS certifications) or equivalent expertise. . . . Have knowledge of Fedline solution security and resiliency assurance program, NIST 800-53/800-37, NIST CSF, SOC 2, PCI, NYDFS NYCRR PART 500 and/or ISO 27001 standards, integrated controls framework, and evaluating design and effectiveness of IT controls working directly with auditors, regulators, investors. . . . Experience in building successful compliance programs for banks or fintech. . Experience defining compliance roadmaps based on customer requirements, compliance documentation, and ensuring that committed assessments are delivered on schedule. . . . Technical fluency; comfortable understanding and discussing technology concepts, experience evaluating tradeoffs and new opportunities with technical team members. . . Compensation and Benefits. . The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location. . .  . . This role may also be eligible for a bonus and/or long term incentives. Your recruiter will provide more information to you. All roles are eligible for competitive benefits. More information about our employee benefits can be found in the link below.. .  . . Benefits. . To view all of our comprehensive and competitive benefits, visit our . Benefits at SoFi & Galileo.  . page!. .  . . US-Based Base Compensation. $134,400. - . $231,000. . USD. Galileo Financial Technologies. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.. . The Company hires the best qualified candidate for the job, without regard to protected characteristics.. . Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.. . New York applicants: Notice of Employee Rights. . Galileo is committed to embracing diversity. As part of this commitment, . Galileo . offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email . [email protected]. .. . Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time.. . Internal Employees. . If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.