GRC Manager, Imprint

• 5+ years of experience in cybersecurity, with a strong focus on compliance, risk, and governance
• Experience leading or supporting compliance frameworks such as SOC 2, PCI DSS, ISO 27001, or NIST CSF
• Familiarity with security questionnaire platforms and processes (e.g., SIG, CAIQ)
• Deep understanding of cybersecurity risk management methodologies and third-party/vendor security due diligence
• Strong knowledge of policy and standards development, security controls, and risk assessment processes
• Excellent communication and collaboration skills with the ability to engage technical and non-technical stakeholders
• Highly organized and detail-oriented with experience managing cross-functional programs and deadlines

Desirable

• The Cybersecurity team at Imprint is foundational to ensuring the safety and trust of our customers, partners, and products
• As a team, we are committed to building a robust and scalable security program
• Our mission is to protect Imprint’s infrastructure, applications, and data from threats while enabling the company to innovate quickly and safely
• Joining this team means you’ll play a crucial role in shaping the security strategy of a rapidly growing FinTech company
• As a GRC Manager Manager, you will drive and manage core security and compliance initiatives at Imprint.
• This includes leading our efforts for security certifications and audits (e.g. , SOC 2, PCI DSS, ISO 27001), defining and maintaining security policies, completing partner and vendor security assessments, and overseeing our cybersecurity risk management program
• You’ll work cross-functionally with engineering, legal, compliance, and external partners to ensure our security posture is strong, transparent, and audit-ready
• Own and drive external security compliance and certification programs (SOC 2, PCI DSS, ISO 27001, etc.)
• Serve as the primary contact for responding to partner security questionnaires and assessments
• Conduct vendor and third-party security reviews, documenting risks and working with stakeholders on mitigation plans
• Define, maintain, and enforce security policies, standards, and guidelines across the organization
• Operate our cybersecurity risk management program—including risk identification, tracking, mitigation planning, and acceptance processes
• Report and track security KPIs across teams, driving accountability and visibility into our security posture
• Collaborate with security application engineers to coordinate security reviews—gathering relevant information, creating and managing review tickets, and communicating outcomes and next steps to stakeholders
• Support internal and external audits and coordinate evidence collection across teams