GRC Engineer, ONE
Cloud & Application Security
$175-190k
+ Stock option
Ethical personal finance platform
Open for applications
Ethical personal finance platform
501-1000 employees
Open for applications
$175-190k
+ Stock option
501-1000 employees
Company mission
To help people live healthier financial lives.
Role
Who you are
- 5+ years of experience in security governance, cloud and application security assessments, risk management, and/or third party risk
- Strong knowledge of various industry standard frameworks such as NIST, FFIEC, SOC 2, PCI DSS, HiTrust, etc
- Thorough knowledge of enterprise-scale security architecture, cloud security, and application security best practices
- Domain knowledge of multiple disciplines including IT systems, networking, security, and compliance
- Familiarity with containerization technologies (e.g., Docker, Kubernetes) and CI/CD pipelines
- Excellent written and verbal communication skills, with the ability to convey technical concepts to both technical and non-technical audiences
- Strong analytical and problem-solving skills with the ability to work independently and as part of a team
- Relevant certifications such as AWS Certified Security Specialty, Certified Information Systems Security Professional (CISSP), or Certified Cloud Security Professional (CCSP) are a plus
What the job involves
- As a GRC Engineer (Cloud & Application Security), you will be instrumental in defining and implementing the overall strategy for One’s Information Security program, and will have opportunities to identify control gaps and lead initiatives to remediate such gaps
- You will be designing, overseeing and executing One’s information security risk management processes, including defining security standards and policies, performing internal and external security assessments, identifying and managing security risks, and supporting audits conducted by independent parties
- You will be focusing on evaluating the security posture of our cloud infrastructure and application security designs, ensuring they comply with compliance frameworks such as SOC 2 and PCI DSS controls
- Proactively evaluate the security configurations of One’s applications and AWS services, such as IAM, VPC, S3, EKS, RDS, and Lambda, based on best practices and One’s established security standards
- Determine detailed remediation plans and steps for security gaps, and work independently or in conjunction with stakeholders to resolve such gaps
- Define, publish, and maintain company-wide security standards and requirements based on industry best practices, evolving threat landscape, and new security-related regulations & frameworks
- Perform in-depth security assessments of third party hosted applications and systems, and provide security recommendations on the desired integration with such systems
- Collaborate with team members on performing security reviews on new product features, system architectures, and business processes
- Support ongoing information security audit initiatives and compliance projects with the team
- Share guidance and training to internal One teams on overall information security, AWS security, and compliance requirements
- Engage with both technology and business teams as a consultant for any security-related issues that affect One’s product features and offering
Our take
Banks have a poor image and are often perceived to not care about their customers. ONE Finance has the financial well-being of its clients at the heart of what it does. Offering equal access to high-yield savings rates and affordable credit that grows. Its signature feature is the ability to organize money in multiple sub-accounts that ONE calls “Pockets,” whether to pay specific bills or save toward goals. You can also set up shared “Pockets” with partners or friends for joint saving objectives.
ONE is part of a new wave of digital banking apps that have the potential to disrupt traditional legacy systems, driven by European firms such as Triodos in the Netherlands. ONE Finance is clear that it doesn’t use deposits for anything that exploits the Earth's resources or is involved in the arms trade, setting it apart from other recent endeavours from Monzo and Revolut who aren’t so forthcoming about where its funds are invested.
In 2022, ONE was acquired by Hazel, a FinTech company which was launched by Walmart and Ribbit Capital and which also acquired Even Responsible Finance at the same time. The companies have merged under the ONE brand, combining workforces, products and operating budgets, and will benefit from Walmart's support and marketing reach.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
68% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Aug 2021
$40m
SERIES B
Mar 2020
$17m
SERIES A
Total funding: $66m
Company benefits
- Benefits effective on day one
- Early access to a high potential, high growth fintech
- Generous stock option packages in an early-stage startup
- Remote friendly (anywhere in the US) and office friendly - you pick the schedule
- Flexible time off programs - vacation, sick, paid parental leave, and paid caregiver leave
- 401(k) plan with match
Company HQ
Civic Center, New York, NY
Articles
Leadership
Brian Hamilton
(Chief Commercial Officer)Started their career at Wells Fargo Foreign Exchange before leaving after almost 8 years to join Clear2Pay in 2006. They founded Isomer Labs, PushPoint, and Azlo before starting One as CEO in February 2019.
Share this job
View 15 more jobs at ONE