Sr. Security Analyst - Governance, Risk and Compliance

About UsFounded in 2005 as the first peer-to-peer marketplace lending platform in the U.S., Prosper was built on a simple idea: connect people who want to borrow money with those who want to invest. Since inception, Prosper has helped more than a million people gain access to affordable credit with over $23 billion in loans originated through its platform. Our mission is to help our customers advance their financial well-being through a variety of products including personal loans, credit, home equity lines of credit (HELOC), and our newest product, HELoan. Our diverse culture rewards accountability and cross functional teamwork because we believe this encourages innovative thinking and helps us deliver on our mission.   We’re on a mission to hire the very best, and we are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere. It is important to us that every hire connects with our vision, mission, and core values. Join a leading fintech company that’s democratizing finance for all!  
About Our Technology TeamWe are aggressively growing our Technology team to support our various financial products. The ideal candidate is passionate about learning the Fintech domain and delivering cutting-edge, high-quality solutions to solve business problems. We utilize a progressive, test-driven, Agile development methodology that places a high premium on communication, teamwork, sound design and clean implementation. 
Our ValuesDiversity expands opportunitiesCollaboration creates better solutions Curiosity fuels our innovationIntegrity defines all our relationshipsExcellence leads to longevity Simplicity guides our user experience Accountability at all levels drives results
COVID-19 Vaccination PolicyProsper is continuing to grow our team during the COVID-19 pandemic, conducting fully remote hiring and onboarding processes. Our philosophy as a business is to approach the COVID-19 situation with empathy and urgency. Prosper’s top priority is the health and safety of our employees and of the communities we serve, including our customers, partners, prospects, and candidates. In accordance with this priority, along with our legal responsibility to provide and maintain a workplace that is safe and free of known hazards, we have adopted a COVID-19 Vaccination Policy which requires all of our employees to receive vaccinations, unless they have an approved accommodation.
www.prosper.comOur Story & Team  //   Our Blog 
The RoleProsper is seeking a detail oriented, highly motivated, technology savvy and passionate security compliance professional with a desire to support, promote and further mature the company's security GRC program.  Responsible in executing various security compliance initiatives such as risk assessments, security control audits and 3rd party risk assessments. You will use your strong communication, analytical and troubleshooting abilities to quickly identify and report on controls from various security domains, control and/or process gaps and to identify process and technology opportunities. 

Problems You Will Solve

• Conduct periodic information security risk assessments 
• Review, audit, and monitor security compliance programs against security policies, standards, and frameworks such as PCI-DSS, NIST-171, SOC2 II, etc. 
• Support developing remediation plans for issues and risks, coordinate activities with owners, and track remediation to completion 
• Assist in documenting, and maintaining the security control matrix 
• Support the management of documentation such as security policies, standards, processes, procedures, and data flows 
• Perform periodic user access reviews 
• Lead evidence collection for external audits related to SOC1, SOC2 II, PCI-DSS, NIST 171, etc. 
• Perform vendor security risk assessments 
• Build and cultivate positive working relationships with stakeholders across various teams 
• Approve user’s access request to systems and applications
• Conduct security awareness training and phishing campaigns

About You

• B.S. degree in Information Systems, Computer Science, , or any technology related field 
• 7+ years of auditing internal controls, security audit, control framework/compliance, information security, and/or technology process experience 
• Very high attention to detail, high integrity, and business ethics 
• Excellent skills around troubleshooting, problem-solving, analytical thinking, and project management 
• Basic knowledge in security technologies such as firewalls, IDS, DLP, Vulnerability Scanners, etc. 
• Ability to work independently to achieve objectives and deliver results 
• Experience in security standards/frameworks such as PCI-DSS, NIST, SOC 2 II, etc. 
• CISSP, CISA, CISM or similar security certification is ideal 
• Big 4 Consulting experience  preferred

CompensationThe salary for this position is $122-$152k annually, plus bonus and generous benefits. In determining your salary, we will consider your location, experience, and other job-related factors.

#IND1#LI-RC1#LI-Remote
Applicants have rights under Federal Employment Laws.Family & Medical Leave Act (FMLA)Equal Employment Opportunity (EEO)Employee Polygraph Protection Act (EPPA)  
California applicants: please click here to view our California Consumer Privacy Act (“CCPA”) Notice for Applicants, which describes your rights under the CCPA: https://www.prosper.com/plp/legal/privacy-notice-for-applicants/
At Prosper, we're looking for people with passion, integrity, and a hunger to learn. We encourage you to apply even if your experience doesn't precisely match the job description. Your unique skill set and diverse perspective will stand out and set you apart from other candidates. Prosper thrives with people who think outside of the box and aren't afraid to challenge the status quo. We invite you to join us on our mission to advance financial well-being.
Prosper is committed to an inclusive and diverse workplace. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical​​​ condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law, including the San Francisco Fair Chance Ordinance. Prosper will consider for employment qualified applicants who are non-US citizens and will provide green card sponsorship.