Kikoff

1 month ago

Staff GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Establish and own Kikoff's Trust & Assurance function within Security, directing SOC 2 and PCI programs, IT general controls, and third-party risk. Lead automation-enabled control operations, evidence workflows, and auditor communications, partnering with Legal, Finance, and Engineering to scale security compliance for a pre-IPO fintech.

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Seniority: Manager level

Key Responsibilities

•Own the SOC 2 Type II program end-to-end, including scoping, control design, evidence collection, walkthroughs, and auditor management
•Maintain PCI DSS self-attestation, including SAQ completion, scope analysis, and vendor oversight
•Serve as the cybersecurity control owner for IT general controls supporting the SOX program, collaborating on logical access and change management
•Operationalize GLBA Safeguards Rule controls across the program
•Design and operate internal cybersecurity control testing and continuous monitoring in partnership with Security Engineering

Pay and Benefits

Salary: USD 260,700 - 304,700 annually

Key Requirements

•7+ years of experience in security compliance, GRC, or technical audit with a focus on cloud-native environments
•Owned at least one SOC 2 Type II cycle end-to-end (design, evidence, walkthroughs, auditor defense)
•Hands-on PCI DSS experience including SAQ environments and tokenization-driven scope reduction
•Ability to read/modify code, infrastructure-as-code, and IAM policies; comfortable with Git workflows and CI/CD
•Understanding of cloud infrastructure and AI-native technologies; experience coordinating with auditors and translating controls into engineering deliverables

Experience:7+ yearsFintechConsumer fintechFinancial services

Skills:CloudInfrastructure as codeCI/CDIAMAuditing

Certifications:SOC 2 Type IIPCI DSS

Languages:English

Tech Stack:CloudIAMCI/CDInfrastructure as CodeAuditingGRC

Company Brief

Kikoff

Kikoff provides a credit-building product that helps consumers build credit history and access affordable lines of credit through a mobile-first platform and educational tools to improve financial health.

Industry: Lending

Growth: Early Stage Startup

Headquarters: San Francisco, United States

Founded: 2019

Website

Loading job details...

Preparing the role view and application actions.

Kikoff

1 month ago

Staff GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: San Francisco

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Seniority: Manager level

Key Responsibilities

•Own the SOC 2 Type II program end-to-end, including scoping, control design, evidence collection, walkthroughs, and auditor management
•Maintain PCI DSS self-attestation, including SAQ completion, scope analysis, and vendor oversight
•Serve as the cybersecurity control owner for IT general controls supporting the SOX program, collaborating on logical access and change management
•Operationalize GLBA Safeguards Rule controls across the program
•Design and operate internal cybersecurity control testing and continuous monitoring in partnership with Security Engineering

Pay and Benefits

Salary: USD 260,700 - 304,700 annually

Key Requirements

•7+ years of experience in security compliance, GRC, or technical audit with a focus on cloud-native environments
•Owned at least one SOC 2 Type II cycle end-to-end (design, evidence, walkthroughs, auditor defense)
•Hands-on PCI DSS experience including SAQ environments and tokenization-driven scope reduction
•Ability to read/modify code, infrastructure-as-code, and IAM policies; comfortable with Git workflows and CI/CD
•Understanding of cloud infrastructure and AI-native technologies; experience coordinating with auditors and translating controls into engineering deliverables

Experience:7+ yearsFintechConsumer fintechFinancial services

Skills:CloudInfrastructure as codeCI/CDIAMAuditing

Certifications:SOC 2 Type IIPCI DSS

Languages:English

Tech Stack:CloudIAMCI/CDInfrastructure as CodeAuditingGRC

Company Brief

Kikoff

Industry: Lending

Growth: Early Stage Startup

Headquarters: San Francisco, United States

Founded: 2019

Website