Astra FI

3 months ago

GRC Program Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 13 hours agoStatus: Live

Job Summary

As Astra's first dedicated GRC Program Manager, you’ll design and run audit programs (SOC 1/2, PCI DSS, ISO 27001), translate regulatory requirements into practical controls, and build governance, risk, and compliance foundations that scale with the business. You’ll partner with engineering and infrastructure teams, manage vendor risk, support enterprise partnerships, and drive continuous compliance as Astra grows.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Program & Project Management (PMO)

Key Responsibilities

•Audit Execution & Readiness: Own day-to-day execution of SOC 1, SOC 2, PCI DSS, and ISO 27001 readiness and audit cycles – including scoping, control testing, evidence collection, auditor coordination, and remediation tracking.
•Control Design & Documentation: Develop and maintain policies, procedures, risk assessments, control narratives, and supporting documentation that meet auditor expectations and scale with the business.
•Cross-Framework Mapping: Map controls across SOC, ISO, PCI, and NIST frameworks to identify overlap, gaps, automation opportunities, and control maturity improvements.
•Risk Management: Facilitate risk assessments for systems, vendors, products, and business initiatives. Maintain risk registers, mitigation plans, and executive reporting on residual risk.
•Engineering Partnership: Partner with engineering and infrastructure teams to translate security requirements into practical technical controls across cloud infrastructure, SDLC, access management, logging, monitoring, and incident response.

Pay and Benefits

Salary: USD 95,000 - 135,000 annually

Equity and Bonus:Equity

Perks:EquityRemote Work

Key Requirements

•3–6+ years of experience in governance, risk, compliance, audit, or information security rolls.
•Hands-on experience supporting or leading SOC 1 and/or SOC 2 audits; experience with PCI DSS and ISO 27001 is strongly preferred.
•Strong working knowledge of compliance frameworks (SOC, ISO 27001, NIST CSF, PCI DSS) and how controls operate in practice.
•Experience working cross-functionally with engineering, product, and operations teams in a technical environment.
•Proven ability to build and maintain high-quality documentation, evidence, and audit artifacts.

Experience:3-6 yearsFintechPayments

Education:Bachelor's

Skills:CommunicationWritingCollaborationAttention to detail

Tech Stack:SOC 1SOC 2PCI DSSISO 27001NIST CSFCloudIdentity and access managementLoggingMonitoringSDLCSecurity toolingAutomation

Company Brief

Astra FI

Provides an API-first instant payments platform that enables developers and businesses to embed fast, secure bank-to-card and bank-to-bank transfers, payouts, and account funding into their products.

Industry: Fintech Infrastructure

Company Size: Small (11 to 50 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: Menlo Park, United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Astra FI

3 months ago

GRC Program Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 13 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Program & Project Management (PMO)

Key Responsibilities

•Audit Execution & Readiness: Own day-to-day execution of SOC 1, SOC 2, PCI DSS, and ISO 27001 readiness and audit cycles – including scoping, control testing, evidence collection, auditor coordination, and remediation tracking.
•Control Design & Documentation: Develop and maintain policies, procedures, risk assessments, control narratives, and supporting documentation that meet auditor expectations and scale with the business.
•Cross-Framework Mapping: Map controls across SOC, ISO, PCI, and NIST frameworks to identify overlap, gaps, automation opportunities, and control maturity improvements.
•Risk Management: Facilitate risk assessments for systems, vendors, products, and business initiatives. Maintain risk registers, mitigation plans, and executive reporting on residual risk.
•Engineering Partnership: Partner with engineering and infrastructure teams to translate security requirements into practical technical controls across cloud infrastructure, SDLC, access management, logging, monitoring, and incident response.

Pay and Benefits

Salary: USD 95,000 - 135,000 annually

Equity and Bonus:Equity

Perks:EquityRemote Work

Key Requirements

•3–6+ years of experience in governance, risk, compliance, audit, or information security rolls.
•Hands-on experience supporting or leading SOC 1 and/or SOC 2 audits; experience with PCI DSS and ISO 27001 is strongly preferred.
•Strong working knowledge of compliance frameworks (SOC, ISO 27001, NIST CSF, PCI DSS) and how controls operate in practice.
•Experience working cross-functionally with engineering, product, and operations teams in a technical environment.
•Proven ability to build and maintain high-quality documentation, evidence, and audit artifacts.

Experience:3-6 yearsFintechPayments

Education:Bachelor's

Skills:CommunicationWritingCollaborationAttention to detail

Tech Stack:SOC 1SOC 2PCI DSSISO 27001NIST CSFCloudIdentity and access managementLoggingMonitoringSDLCSecurity toolingAutomation

Company Brief

Astra FI

Provides an API-first instant payments platform that enables developers and businesses to embed fast, secure bank-to-card and bank-to-bank transfers, payouts, and account funding into their products.

Industry: Fintech Infrastructure

Company Size: Small (11 to 50 employees)

Growth: Growth Stage Startup

Funding: Series A

Headquarters: Menlo Park, United States

Founded: 2016

Website LinkedIn