Simplify Logo

Full-Time

Compliance/Security Monitoring and Reporting Analyst

Confirmed live in the last 24 hours

Finix

Finix

201-500 employees

Simplifies payment processing for software platforms

Fintech
Enterprise Software

Compensation Overview

$95k - $120kAnnually

+ Equity + Benefits

Mid, Senior

Remote in USA

Category
Risk & Compliance
Legal & Compliance
Requirements
  • Payments experience
  • An aptitude for digging deep into Information Security requirements
  • 3+ years of experience in PCI, SOC, security audits, AML audits or equivalent assessments (client-side, servicer, assessor, or industry consultant)
  • A talent for analyzing requirements of Information Security and Compliance frameworks, particularly as they relate to the payment industry, and crafting solutions for adherence
  • Knowledge of cloud computing and nuances of managing in an AWS/Microsoft/Google cloud vs. traditional on-premise data centers
  • Optional: Industry certifications (CRISC, CTPRP, SSCP, CISSP, CISA, CISM) that demonstrate your desire to be the best at what you do
Responsibilities
  • Identify and validate key controls from enterprise and functional risk assessments to mitigate risks.
  • Ensure annual updates to the Enterprise and functional risk assessments (Ops, Tech, People, Legal, IT) are completed and communicated to support SOC and InfoSec policy administration.
  • Manage key risk updates and remediation in our Drata GRC tool.
  • Develop and execute quarterly internal risk self-assessments and mini-audits of key controls, documenting required remediation to stay ahead of potential risks.
  • Oversee critical areas such as User Access reviews, Firewall rules reviews, Change Management, Vulnerability Management, Business Continuity/Disaster Recovery, and Employee training compliance.
  • Ensure compliance with PCI requirements for merchants, sub-merchants, and vendor PCI/SOC reports, and run OFAC sanctions screening during vendor approvals and contract renewals.
  • Conduct comprehensive compliance and risk reviews for all vendors and clients, ensuring they meet the corporate InfoSec program's requirements.
  • Operate the vendor re-review process, ensuring alignment with PCI, SOC, and Sponsor Bank requirements, and maintain thorough documentation for audits.
  • Gather evidence and documentation for external audits related to Compliance and InfoSec programs, including those by PCI QSA, SOC Audit firm, AML Independent Audit firm, Visa, Mastercard, American Express, Discover, and sponsor banks.
  • Track and document any required remediation from audit findings to ensure ongoing compliance.

Finix simplifies payment processing for software platforms, enabling them to accept payments, manage payouts, and onboard merchants through a developer-friendly API. This API allows different software applications to communicate, making it easier for clients like SaaS providers and e-commerce platforms to handle transactions efficiently. Finix's solution stands out by streamlining payment operations, reducing complexity, and ensuring secure transactions. The company generates revenue by charging fees for API usage and related services. Finix's goal is to help businesses increase revenue from their payment operations while allowing them to focus on their core activities and growth.

Company Stage

Series B

Total Funding

$121M

Headquarters

San Francisco, California

Founded

2015

Growth & Insights
Headcount

6 month growth

2%

1 year growth

0%

2 year growth

16%
Simplify Jobs

Simplify's Take

What believers are saying

  • Finix's expansion into the Canadian market opens new revenue streams and broadens its international footprint.
  • The partnership with Vroom Delivery to create Pay360 demonstrates Finix's ability to innovate and address niche market needs, such as age-restricted product sales.
  • The launch of no-code and low-code features makes Finix's solutions accessible to a wider range of businesses, potentially increasing its customer base.

What critics are saying

  • The highly competitive fintech sector requires continuous innovation to maintain market position, posing a risk if Finix fails to keep up.
  • Regulatory changes in different markets could complicate Finix's operations and increase compliance costs.

What makes Finix unique

  • Finix's developer-friendly API simplifies payment processing integration for software platforms, unlike competitors who may offer more complex solutions.
  • The company's focus on no-code and low-code features allows businesses to implement payment solutions without extensive technical expertise, setting it apart from traditional payment processors.
  • Finix's comprehensive suite of tools, including automated merchant underwriting and fraud prevention, provides a more holistic approach to payment processing compared to competitors.

Benefits

Competitive compensation

Generous PTO

Flexible health plans

Coverage for dependents

Inclusive parental leave