Junior Governance, Risk, and Compliance (GRC) Analyst

About Uphold

The Web3 economy will redefine how financial value is managed and exchanged - with much of this activity shifting towards blockchain networks and digital assets.

Founded in 2013, Uphold is a Web3 financial platform that supports almost 300 digital assets, serving as a Regulated Gateway to the Web3 economy.

With integrations with 27 blockchain networks and a robust trading engine connected to 30 underlying venues, the Uphold platform enables users to trade 'Anything-to-Anything' with competitive pricing and deep liquidity.

To date, Uphold has facilitated over 120 million transactions worth $40 billion, serving 10 million customers across 150+ countries.

Uphold strips away the complexity and lack of transparency to open up Web3 finance for everyone.

To learn more about Uphold, please visit uphold.com.

The opportunity:

Uphold has an immediate opening for a Junior GRC Analyst with baseline experience in various security and privacy governance, risk, and compliance processes. This is an incredibly exciting opportunity where you'll get to learn, work, and collaborate with multiple lines of business and internal IT partners in several Information Security and Data Privacy initiatives. You'll additionally assist with the management of our policy lifecycle management program, prepare and initiate assessments/audits facilitated by electronic surveys and third-party risk questionnaire assessments.

This role requires a polished ability to communicate with members of the internal team, external entities, and their cross functional partners.

What you'll be doing primarily:

• Assist in the development and implementation of GRC policies, procedures, and standards to ensure compliance with regulatory requirements and industry best practices.
• Assist in the maintenance and enhancement of GRC tools and systems to support risk management activities and facilitate compliance monitoring.
• Support the management, governance, training, and deployment of company policies, procedures, standards, and controls to govern the protection of corporate information systems, networks, and data.
• Participate in internal audits and assessments to evaluate the effectiveness of controls and identify opportunities for remediation.
• Stay informed about emerging trends and developments in GRC practices, regulations, and technology solutions to contribute to continuous improvement initiatives.
• Assist in the development and delivery of training programs to raise awareness and promote a culture of compliance within the organization.
• Provide ad-hoc support and assistance to the GRC team as needed, contributing to the overall effectiveness and efficiency of GRC operations.

Required qualifications:

• Bachelor's degree in Information Technology or a relevant Cybersecurity field, and 1-2 years of overall experience.
• 1+ years of experience working as a Risk, Information Assurance, or Information Systems Security Analyst.
• Basic knowledge of ISO27001, SOC2, PCI-DSS security controls is required.
• Must have strong communication skills, both oral and written, with excellent interpersonal, team and organization skills.
• A self-starter with proven abilities to collaborate and gather information from multiple teams.
• Passion for Information Security Governance, Risk, and Compliance.
• Strong analytic skills and attention to detail.
• Fluent written and oral English skills.

Bonus if you have:

• Experience applying security controls to an IT environment and gathering evidence of those controls preferred.
• Candidates who have industry recognized security certifications strongly preferred (e.g. CRISC, CISSP, CISA, CISM, CEH, etc.)
• Experience in the financial services sector; Cryptocurrency Industries.
• Knowledge of blockchain technology.
• Knowledge of financial services industry and applicable regulations and industry standards (GLBA, FFIEC, FSSCC, etc.).

What we have to offer you:

• An amazing work environment in a company that continues to grow, driven by extraordinary and passionate people that keep up innovating and challenging more each day.
• An international team, in a cutting-edge field, working on the most fascinating projects.
• Growth and career opportunities, and the chance to be proactive and creative.
• A flexible and enthusiastic work environment that offers you snacks, a lot of coffee, and other great benefits.
• Open and transparent culture - we get together on a weekly basis to share updates, strategic plans and engage with each other informally over food and drinks.
• Interesting events that keep you connected with the team and celebrate our success.

Be part of a great company that is revolutionizing financial services. Apply now {insert the link to the job opening in BambooHR}!

If this job isn't exactly what you are looking for, visit our careers page to check out all our exciting opportunities.

EEOC Employer
We're proud to be an Equal Opportunity Employer and we celebrate our employees' differences, including race, color, religion, gender identity, national origin, age, military service eligibility, veteran status, sexual orientation, marital status, disability, and any other protected classes. Difference makes us stronger and better - together.