Staff Cybersecurity Controls Specialist
Sofi · New York City · Posted Jul 9, 2026
Apply on company site Track it in JobSkout
Employee Applicant Privacy Notice
Who we are:
Shape a brighter financial future with us.
Together with our members, we’re changing the way people think about and interact with personal finance.
We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
The role:
The Staff Cybersecurity Controls Specialist is responsible for working with information security partners to document, manage, and monitor progress toward achieving risk mitigation. This person will work very closely with process owners to evaluate risks and control posture related to information security objectives; identify emerging risks; facilitate identification of control weaknesses; and monitor and manage the lifecycle of information security-related issues. This position is within the first line-of-defense (1LOD) and requires coordination with second line-of-defense (2LOD) partners and auditors in support of their activities. Additionally, this role will promote and support security risk awareness activities.
What you’ll do:
Management and oversight of risks and controls for information security objectives across the enterprise
Partner with security leaders and staff to identify and document risks related to information security objectives
Execute formal Risk and Control Self-Assessment (RCSA) activities in coordination with security risk owners
Work with 2LOD and audit teams to coordinate monitoring activities and objectives
Prepare committee materials, briefings, summary reports, and other documentation for executive-level audiences
Assist with preparation of training materials related to information security risks
Drive accountability with process owners to ensure timely identification and remediation of security-related control issues
Exceed timeliness goals and meet deadlines for mitigating issues
Provide input and subject matter guidance on information security policies and standards
Adhere to risk and compliance policies.
Maintain a comprehensive understanding of existing and emerging regulatory requirements, operational processes, inherent risks, and internal policies practices to provide advice to stakeholders.
Communicate information security risk posture to senior management and stakeholders
What you’ll need:
Minimum 7 years of experience in cybersecurity risk management in a financial services and/or banking operating environment; specifically managing first or second line of defense risk and controls activity
Experience with interacting and solutioning with information security teams to document and measure control effectiveness
External audit, internal audit, or 2LOD information security risk experience
Experience collaborating across multiple teams and enterprise-wide
Strong ability to promote a culture of ownership, accountability, and collaboration
Strong verbal and written communication skills
Strong understanding of risk management frameworks and best practices
Strong analytical and problem-solving skills
Excellent communication and presentation skills
Ability to balance multiple critical priorities simultaneously
Ability to build a process from the ground up and drive engagement
Experience in highly-matrixed, fast paced environments
A Bachelor's Degree or 4 years of relevant experience in lieu of a degree
Compensation and Benefits
The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.
To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!
SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.
The Company hires the best qualified candidate for the job, without regard to protected characteristics.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
New York applicants: Notice of Employee Rights
SoFi is committed to an inclusive culture. As part of …