On behalf of FinTech Client #1, SD Solutions is looking for a Junior GRC/ Compliance Analyst to step onto a fintech unicorn rocketship! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference.
SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer.
You will support Tipalti’s third-party risk management program, helping to assess, monitor, and manage risks associated with vendors and external service providers. You’ll work closely with the GRC Manager to mature and operationalize the TPRM function.
Responsibilities:
- Conduct vendor onboarding risk assessments (security questionnaires, due diligence reviews)
- Maintain and update the vendor risk register and assessment pipeline
- Review vendor SOC 2 reports, security documentation, and certifications
- Track vendor risk findings and follow up on remediation commitments
- Support periodic vendor reassessments based on risk tier
- Coordinate with internal stakeholders (Procurement, Legal, IT) on vendor reviews
- Assist in building and improving TPRM workflows and documentation
- Manage assessments within the GRC platform (Drata)
Requirements:
- Basic understanding of information security concepts (CIA triad, access control, data classification)
- Familiarity with compliance frameworks (ISO 27001, SOC 2)
- Strong organizational and communication skills
- Ability to read and interpret vendor security documentation
- Attention to detail and structured thinking
Advantages:
- Experience with GRC tools (Drata, Vendict, or similar)
- Basic knowledge of data privacy regulations (GDPR, CCPA)
- Any security certification progress (CompTIA Security+, ISO 27001 Foundation)
What You’ll Learn
- End-to-end TPRM lifecycle in a high-growth fintech environment
- Hands-on experience with ISO 27001 and SOC 2 operational controls
- GRC tooling (Drata) and vendor risk workflows
About the company:
A well-funded fintech unicorn operating a cloud-based global payables automation platform. Enterprises use it to streamline supplier payments, mass payouts, and AP operations across international markets — replacing manual finance processes with automated, audit-ready workflows.
By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice, and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.
Skills Required
- Basic understanding of information security concepts (CIA triad, access control, data classification)
- Familiarity with compliance frameworks (ISO 27001, SOC 2)
- Strong organizational and communication skills
- Ability to read and interpret vendor security documentation
- Attention to detail and structured thinking
- Experience managing assessments within a GRC platform (Drata)
- Experience with GRC tools (Drata, Vendict, or similar)
- Basic knowledge of data privacy regulations (GDPR, CCPA)
- Progress toward security certifications (CompTIA Security+, ISO 27001 Foundation)
