The Role
We are seeking a GRC Senior Manager to play a key role in the oversight and coordination of security and compliance-related functions. This individual will interface with all departments and must exhibit an ability to work cross-functionally. Above all other factors, we are looking for smart, driven candidates who want to be part of a culture of innovation and creativity as we develop and define the peer-to-peer lending market.
If you are a passionate GRC professional who is interested in driving our GRC practice, please read on!
Problems You Will SolveDevelop Prosper’s GRC strategy and manage the day-to-day governance activities related to risk, control, and compliance managementEstablish KPIs and metrics to demonstrate effectiveness of the GRC program and report riskLead the PCI-DSS compliance assessment (readiness along with the external attestation)Own the Risk Management Program, planning and coordinating the execution of risk assessments (NIST CSF, CIS), monitoring of emerging risks, and maintenance of the risk registerLead cross-functionally to maintain compliance certifications such as SOC1/SOC2 Type II, and other external IT auditsDrive remediation of process and control deficiencies and improvements identified internally and externallyLead third-party cyber risk assessment/re-assessment tasks; overall responsible for vendor cybersecurity reviewsLead the Security Awareness Program (routine phishing simulation campaigns, security awareness trainings, newsletters, etc.)Take ownership of documentation processes; assist with the development and maintenance of policies, guidelines, standards, and processesInterface with both technical (Engineering, Technical Operations) and non technical (HR, Legal, Compliance) teamsBuild and automate processes to simplify and maintain continuous compliance over the technology environmentCommunicate, develop, and foster strong, collaborative relationships with stakeholders across all levels of the organizationAssist with responding to privacy and security compliance requests from regulators, partners, and vendorsLead a team of senior GRC analystsSupport the preparation of regular and ad-hoc risk reports for ERM governance, boards, and other relevant stakeholdersAll About You4+ years of direct management experience10+ years of progressive and demonstrated expertise in IT compliance and risk management (PCI-DSS, SOC 1/2, NIST CSF, etc.)Excellent written, verbal communication skills. Ability to tailor communication style to audience at handExperience with cloud environmentsExcellent project management and process improvement skillsAbility to effectively work with technical and non-technical resourcesSelf-directed, works with minimal guidance, and recognizes when guidance neededExperience with CCPA preferredCISSP, CISA, or CRISC (or similar) certifications preferred#LI-SK1
#LI-Remote
About Our Technology Team
We are growing our Technology team to support our various financial products. The ideal candidate is passionate about learning the Fintech domain and delivering cutting-edge, high-quality solutions to solve business problems. We utilize a progressive, test-driven, Agile development methodology that places a high premium on communication, teamwork, sound design and clean implementation.
About Us
Founded in 2005 as the first peer-to-peer marketplace lending platform in the U.S., Prosper was built on a simple idea: connect people who want to borrow money with those who want to invest. Since inception, Prosper has helped more than a million people gain access to affordable credit with over $25 billion in loans originated through its platform. Our mission is to help our customers advance their financial well-being through a variety of products including personal loans, credit, home equity lines of credit (HELOC), and our newest product, HELoan. Our diverse culture rewards accountability and cross functional teamwork because we believe this encourages innovative thinking and helps us deliver on our mission.
We’re on a mission to hire the very best, and we are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere. It is important to us that every hire connects with our vision, mission, and core values. Join a leading fintech company that’s democratizing finance for all!
Our Values
Diversity expands opportunities
Collaboration creates better solutions
Curiosity fuels our innovation
Integrity defines all our relationships
Excellence leads to longevity
Simplicity guides our user experience
Accountability at all levels drives results
Applicants have rights under Federal Employment Laws.
At Prosper, we're looking for people with passion, integrity, and a hunger to learn. We encourage you to apply even if your experience doesn't precisely match the job description. Your unique skill set and diverse perspective will stand out and set you apart from other candidates. Prosper thrives with people who think outside of the box and aren't afraid to challenge the status quo. We invite you to join us on our mission to advance financial well-being.
Prosper is committed to an inclusive and diverse workplace. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law, including the San Francisco Fair Chance Ordinance. Prosper will consider for employment qualified applicants who are non-US citizens and will provide green card sponsorship.
