Cyber Risk and Compliance Lead

Senior Cybersecurity Analyst | 100% Remote | Eltropy (Product based fintech SaaS firm)

We are seeking a Senior Cybersecurity Analyst – GRC (Governance, Risk, and Compliance) to support and improve our security compliance and risk management program. This individual will help manage third-party audits, perform risk assessments, ensure ongoing compliance with security frameworks, and support business teams with customer and vendor assurance.

You’ll work closely with security, engineering, legal, and customer teams to ensure Eltropy’s security posture remains strong, transparent, and audit-ready.

Key Responsibilities

• Assist in the preparation and execution of third-party audits and assessments, including SOC 2, PCI-DSS, NIST CSF, and ISO 27001.
• Support the development and maintenance of Eltropy’s GRC program, ensuring alignment with business and regulatory requirements through well-defined policies, controls, and risk processes.
• Respond to customer security questionnaires and due diligence requests.
• Conduct and manage vendor security assessments, maintain risk tracking, and ensure third-party compliance.
• Perform risk assessments across systems, tools, and business processes;

manage mitigation plansand maintain an exceptions register.

Skills & Attributes

Preferred Skills

Certifications (Preferred But Not Mandatory)

About Eltropy (www.Eltropy.Com)

Eltropy is a rocket ship FinTech on a mission to disrupt the way people access financial services. Eltropy enables financial institutions to digitally engage in a secure and compliant way. Using our AI enabled digital conversations platform, community financial

institutions can improve operations, engagement and productivity. CFIs (Community Banks and Credit Unions) use Eltropy to communicate with consumers via Text, Video, Secure Chat, co-browsing, screen sharing and chatbot technology — all integrated in a single platform bolstered by AI, skill-based routing and other contact center capabilities.

Eltropy Values

Eltropy is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status