Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The role:
The Staff Cybersecurity Controls Specialist is responsible for working with information security partners to document, manage, and monitor progress toward achieving risk mitigation. This person will work very closely with process owners to evaluate risks and control posture related to information security objectives; identify emerging risks; facilitate identification of control weaknesses; and monitor and manage the lifecycle of information security-related issues. This position is within the first line-of-defense (1LOD) and requires coordination with second line-of-defense (2LOD) partners and auditors in support of their activities. Additionally, this role will promote and support security risk awareness activities.
What you’ll do:
- Management and oversight of risks and controls for information security objectives across the enterprise
- Partner with security leaders and staff to identify and document risks related to information security objectives
- Execute formal Risk and Control Self-Assessment (RCSA) activities in coordination with security risk owners
- Work with 2LOD and audit teams to coordinate monitoring activities and objectives
- Prepare committee materials, briefings, summary reports, and other documentation for executive-level audiences
- Assist with preparation of training materials related to information security risks
- Drive accountability with process owners to ensure timely identification and remediation of security-related control issues
- Exceed timeliness goals and meet deadlines for mitigating issues
- Provide input and subject matter guidance on information security policies and standards
- Adhere to risk and compliance policies.
- Maintain a comprehensive understanding of existing and emerging regulatory requirements, operational processes, inherent risks, and internal policies & practices to provide advice to stakeholders.
- Communicate information security risk posture to senior management and stakeholders
What you’ll need:
- Minimum 7 years of experience in cybersecurity risk management in a financial services and/or banking operating environment; specifically managing first or second line of defense risk and controls activity
- Experience with interacting and solutioning with information security teams to document and measure control effectiveness
- External audit, internal audit, or 2LOD information security risk experience
- Experience collaborating across multiple teams and enterprise-wide
- Strong ability to promote a culture of ownership, accountability, and collaboration
- Strong verbal and written communication skills
- Strong understanding of risk management frameworks and best practices
- Strong analytical and problem-solving skills
- Excellent communication and presentation skills
- Ability to balance multiple critical priorities simultaneously
- Ability to build a process from the ground up and drive engagement
- Experience in highly-matrixed, fast paced environments
- A Bachelor's Degree or 4 years of relevant experience in lieu of a degree
Skills Required
- Minimum 7 years of experience in cybersecurity risk management in a financial services or banking environment
- Experience managing first or second line of defense risk and controls activities
- Experience interacting with information security teams to document and measure control effectiveness
- External audit, internal audit, or 2LOD information security risk experience
- Experience executing Risk and Control Self-Assessment (RCSA) activities
- Experience preparing committee materials, executive briefings, and summary reports
- Strong understanding of risk management frameworks and best practices
- Strong verbal, written, and presentation skills
- Ability to build processes, drive engagement, and collaborate across multiple teams in a matrixed environment
- Ability to balance multiple priorities and meet timeliness goals for remediation
- Experience in highly matrixed, fast-paced environments
- Bachelor's degree or 4 years of relevant experience in lieu of a degree
What the Team is Saying
SoFi Compensation & Benefits Highlights
-
Healthcare Strength — Benefits materials describe comprehensive medical, dental, and vision coverage with mental‑health support, EAP, and wellness programs. Feedback suggests some plans include options with 100% company‑paid premiums.
-
Parental & Family Support — Parental and family supports include up to 12 weeks fully paid parental leave, fertility/adoption resources, and subsidized backup child and elder care. Pet insurance is also available.
-
Leave & Time Off Breadth — Time away benefits include flexible vacation for exempt employees, generous PTO/sick time for non‑exempt staff, and paid holidays. Early‑release “SoFi Fridays” are also cited.
SoFi Insights
What We Do
SoFi wasn’t built to be a bank. Or a technology company. We were built for one mission: help people achieve financial independence so they can realize their ambitions. Redefining an entire industry isn’t easy work—and it’s not for the faint of heart. It takes a certain kind of team. People with diverse perspectives and expertise, united by a common sense of purpose. People willing to challenge assumptions but always do the right thing. People proving that innovation and responsibility don’t have to compete, but can come together to create something truly unconventional in the world. For the last eight years, we’ve been charting this new path forward. We call it The SoFi Way. At SoFi, we don’t just talk about culture: we live it. The SoFi Way is how we show up every day, how we make decisions, and how we build for our members, clients, and each other.
Why Work With Us
Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation Fintech company using innovative, mobile-first technology to help our members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront.
Gallery
SoFi Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
For the majority of our workforce who work on a hybrid schedule, the in-office requirement is a handful of days per month!
