Senior Security Program Manager

The Team

Are you interested in developing progressive solutions to advance Information Security Governance, Risk, and Compliance (GRC)? Do you believe we can automate and orchestrate our way out of legacy patterns of manual burden in GRC? Come join our Information Security team as our next Senior Security Program Manager to lead the way. Your function will be to build GRC solutions and work with key primary stakeholders that will mature Upstart. You'll collaborate with various Upstart teams to identify threats and risks to the organization, prioritize and manage security initiatives, drive programs, create new solutions, and mature existing workflows. 

How you’ll make an impact:

• Partner with stakeholders (Business, Engineering, Application Security, Security Operations, Operations, Technology, Risk, Audit, Compliance, Legal) to align with strategic vision and goals.
• Develop, implement, and maintain GRC Programs that drive accountability across stakeholder teams to ensure security objectives are met.
• Automate and improve efficiency of Information Security processes and programs. 
• Ensure compliance to Information Security policies and practices.
• Program manage strategic Information Security initiatives to mitigate major risks
• Lead GRC governance of programs such as Application Registration & Inventory, Identity & Access Management, Architectural Review Assessment, Application & Infrastructure Vulnerability Assessment, Multi-Factor Authentication, Suspicious Activity Detection, Information Security Third Party Risk Management, etc.
• Enhance the overall Information Security policy framework and support teams in creating standards, and procedures and 
• Own the with ongoing security training & awareness programs.
• Monitor adherence to Information Security policies, procedures and control frameworks.
• Develop Key Risk Indicators (KRIs) to drive program adherence and deliver on overall program performance

What we’re looking for: 

• At least 10+ years of GRC program management experience.
• Experience running GRC programs, including gathering and transforming requirements into actionable work items.
• Scripting and light coding ability to automate processes and integrations between systems is a plus.
• Ability to prioritize and multitask effectively.
• Demonstrated ability to effectively cross collaborate with stakeholder teams.
• Strong communication and documentation skills.
• Experience influencing others without having direct management authority and motivating them to successfully complete tasks within required timelines.
• Strong risk analysis and problem-solving skills.
• Ability to write and manage Information Security policies.
• Experience/familiarity with standard control frameworks, such as NIST, ISO, CIS, etc.
• Current and active certification in Information Security (CISA, CISM, CISSP, etc.).
• Ability to interpret cybersecurity regulations and assess compliance.

Position Location - This role is available in the following locations: Remote, San Mateo, Columbus 

Time Zone Requirements - This team operates on the East/West Coast time zones.

Travel Requirements - This team has regular on-site collaboration sessions. These occur a few days per Quarter at the San Mateo office. If you need to travel to make these meetups, Upstart will cover all travel related expenses.

What you'll love: 

• Competitive Compensation (base + bonus & equity)
• Comprehensive medical, dental, and vision coverage with Health Savings Account contributions from Upstart 
• 401(k) with 100% company match up to $4,500 and immediate vesting and after-tax savings
• Employee Stock Purchase Plan (ESPP)
• Life and disability insurance
• Generous holiday, vacation, sick and safety leave  
• Supportive parental, family care, and military leave programs
• Annual wellness, technology & ergonomic reimbursement programs
• Social activities including team events and onsites, all-company updates, employee resource groups (ERGs), and other interest groups such as book clubs, fitness, investing, and volunteering
• Catered lunches + snacks & drinks when working in offices

Last updated on Aug 7, 2024