GRC Analyst - Third Party

As Marqeta’s GRC Analyst - Third Party, you will support the implementation of a modern Third Party Risk Management program. This role will work with the TPRM team within the Office of Cybersecurity to build third party risk management governance and audit frameworks that meet key security standards and regulatory requirements, including PCI DSS, ISO 27001, GDPR, and SSAE-18. The GRC Analyst will collaborate with cross-functional teams and external parties to assess security controls in third-party environments, perform ongoing monitoring audits, drive remediation of risks, and articulate identified risks to key stakeholders. This position will have an opportunity to innovate and drive adoption of risk management and vendor management solutions. 

The Impact You’ll Have

• Support enhancement and implementation of policies, procedures and program governance to ensure effective security risk management of third parties in accordance with industry and regulatory requirements
• Perform security risk assessments of third parties (ie. vendors and customers) to identify, validate and remediate risks
• Perform audits of high risk vendors and collaborate with business owners and vendors to mitigate risks
• Perform due diligence reviews on prospective customers to ensure compliance with our internal and regulatory requirements
• Communicate risks in a meaningful manner with internal stakeholders
• Report risk metrics in a timely manner
• Categorize third parties using a risk-based tiering framework
• Increase efficiency throughout the third party risk management process with automation and innovation
• Develop standardized reporting to enable continuous monitoring against program goals

Who You Are

• Minimum 2-3 years industry experience in Information Security, Third Party Risk Management, IT Risk Management, IT Audit or Compliance
• Experience assessing compliance with technical regulations and standards (e.g. PCI DSS, ISO 27001, SOC2, SOX, NIST, etc.)
• Experience working with global privacy and data protection regulations is a plus (e.g. GDPR, CCPA)
• A strong bias toward action and able to operate effectively in a dynamic, fast-paced environment
• Ability to manage time effectively and adhere to SLAs
• Excellent verbal and written communication skills including the ability to simplify key security messages and translate technical matters to non-technical audiences
• Positive attitude, team player, adaptable, resourceful, and self-starter who is able to work independently
• Willingness to challenge the status quo and drive continuous improvement through change
• Ability to travel to some onsite audits as needed

Nice-To-Haves

• Masters or Bachelors degree in Computer Science, Information Security, Information Technology or equivalent experience
• Experience with Security / GRC tooling such as OneTrust, Salesforce, JIRA, etc. is a plus
• CISSP, CISM, CISA, CIPP preferred

Your Manager

• Rosalyn Hua

Recruiter For This Role

• Agata Wojciechowska

Typical Process

• Application Submission
• Recruiter phone call
• Hiring manager video call
• Virtual “Onsite” consisting of 4-5, 45 min calls
• Offer!

Compensation and Benefits

Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location. 

When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position, reflected in CAD,  is: 62,800-78,500.

We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company.

Along with monetary compensation, Marqeta offers

• Multiple health insurance options
• Flexible time off – take what you need
• Retirement savings program with company contribution
• Equity in a publicly-traded company 
• Monthly stipend to support our remote work model
• Annual “development dollars” to support our people growth and development
• Family-forming benefits and up to 20 weeks of Parental Leave

About Marqeta

Marqeta is on a mission to change the way money moves. We’re one of the earliest enablers of embedded finance, a market opportunity sized up in the trillions. Our card issuing platform provides unprecedented flexibility and control for companies to issue cards, authorize transactions, and manage payment operations in real time. Marqeta is powering the most well known brands in the new economy (Block, Cash App, Affirm, Instacart, Doordash, Uber, Walmart, etc). You don’t need to be a Payments expert to join the Marqeta Team, let us help you with that.  This is the opportunity of a lifetime to work with innovators around the world and unlock equitable financial access for all.

Marqeta’s Values

– Solve for the Customer: With a deep understanding of our customers' business and empathy for their needs, we deliver products and services that drive their success. Earning and keeping their trust guides everything we do.

– Do What's Right: Knowing businesses and livelihoods depend on us, we pursue solutions that disrupt responsibly and deliver high-quality results that our customers count on. We own our work from start to finish.

– Simplify and Innovate: We approach challenges with curiosity and take smart risks. Innovation comes from finding better, simpler ways to achieve extraordinary outcomes.

– Win as a Team: We succeed together by embracing diverse perspectives and pushing each other to raise the bar. We lead with humility and set aside hierarchy to work as a team.

– Make it Count: We drive forward with focus and agility. With a sense of urgency and purpose, we get the job done, and done right.

Equal Employment Opportunity, Accommodations and Privacy 

Marqeta is proud to be an equal opportunity employer that gives consideration to all qualified applicants regardless of race, ancestry, national  origin, color, Indigenous, citizenship, religion/creed, sex, sexual orientation, gender identity, gender expression marital status, family status, disability, veteran status, criminal histories consistent with legal requirements, or any other characteristic protected by applicable law. 

Our dedication to diversity and inclusion extends beyond the categories above. Review Marqeta’s ESG Report to see that dedication in action. Fostering an environment where everyone feels valued and respected creates a stronger and more innovative team at Marqeta. We celebrate the unique contributions of each individual and empower all members of our organization. Join us in building a company where diversity thrives and everyone can be their authentic selves.

If you require reasonable accommodation for the application process and beyond (including due to a disability), please submit this form and we will be more than happy to assist you. Marqeta will make reasonable accommodations for candidates when needed in accordance with applicable law. The Applicant and Candidate Privacy Notice applies to the personal data that you directly provide to us or that we collect during the application and candidate recruitment process.