Security Analyst

San Francisco, New York, Remote

Blend logo
Apply now Apply later

Posted 2 weeks ago

Blend helps lenders maximize their digital agility. Our digital lending platform is used by Wells Fargo, U.S. Bank, and other leading financial institutions to increase customer acquisition, improve productivity, and accelerate the delivery of any banking product across every channel. We process more than $3.5 billion in mortgages and consumer loans daily, helping millions of consumers get into homes and gain access to the capital they need to lead better lives.
As a Security Analyst, you will support the Customer Trust, Third-Party Risk, Audit, and Privacy operations of the Security team at Blend. You’ll build knowledge about the Blend product and the security controls that protect sensitive financial information, and you’ll use that knowledge to maintain strong relationships with customers and ensure that Blend data is kept safe. You will investigate third-party security programs, and track risk findings to remediation. You will also help Blend maintain a multitude of security compliance certifications like SOC 2, PCI, and ISO 27001. If you’re interested in jumpstarting a career in security, this role will provide you with the chance to be a part of a high-functioning security team protecting some of the most important data in our user’s financial lives.

How You'll Contribute:

  • Answer questions about the Blend security program from customers
  • Maintain up to date security program documentation
  • Perform security assessments on third-parties and report on potential risk areas
  • Draft documentation that provides guidance for secure third-party access to Blend
  • Keep up to date records that meet third-party continuous monitoring obligations
  • Collect evidence (screenshots, configurations, etc.) that proves the operation of Blend security controls

Who You Are:

  • Strong organizational and time management skills
  • Able to draft clear responses to customer questions
  • Working knowledge of modern cloud productivity tools like GSuite and Slack
  • Able to absorb new information and ask thoughtful questions about security
  • Demonstrated passion for the information security field is a plus (e.g., pursuing a certification, online coursework, or infosec side projects)
  • Ability to explain security risk issues to non-security peers is a plus

Benefits and Perks:

  • Meaningful equity and a 401(k) plan
  • Comprehensive health benefits Sponsored gym memberships, ClassPass credits, or wellness stipend
  • Lunch, dinner, snacks, and Pizza Fridays
  • On-site meditation, yoga, and massages
  • Flexible work schedule, with open vacation policy
  • 4 months of paid parental or personal leave
  • Convenient location, with parking programs, and flexible commuter options
Blend is an equal opportunity employer that values diversity, inclusion and belonging. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity or expression, sexual orientation, age, marital status, veteran status disability status, or any other characteristic protected by law. We will consider for employment all qualified applicants with arrest and conviction records in a manner consistent with applicable law, including the San Francisco Fair Chance Ordinance. Notice at Collection for California Applicants 
Job tags: Banking Compliance ISO 27001 PCI Security assessments SOC 2
Job region(s): North America Remote/Anywhere
Job stats:  67  16  0
  • Share this job via
  • or