← All roles

Sr. Information Security Analyst

Betterment· Finance
Apply on company site
Hybrid (New York, NY)$170k - $185kfull-timePosted 2w ago

About the role

Senior information security professional on the Govern & Control team responsible for maturing risk management processes, guiding risk-based decisions, and mentoring analysts within a second-line-of-defense function.

Responsibilities

  • Leads major program areas with limited supervision, such as vulnerability management, third-party risk, identity theft oversight, business continuity and disaster recovery, or issues management, and is accountable for outcomes and OKRs.
  • Leads risk assessment processes end to end, documents summarized risk conclusions substantiated by data, and sets templates for others to follow.
  • Designs and documents complex internal controls, including building reports or automation; leverages AI and automation tooling to scale work.
  • Provides effective challenge to Engineering partners and collaborates with Compliance and Security Engineering to mature risk processes, tools, and reporting practices.
  • Uses professional judgment and quantifiable methods to measure risk, driving risk acceptance or treatment within appetite.
  • Independently authors high-quality updates to policies and procedures; owns program-level and KRI reporting to leadership and governance committees; may serve as Chair or Secretary for a governance committee.
  • Acts as escalation point and reviewer for junior analysts to raise consistency and quality of outputs.
  • Follows regulatory changes and industry trends, maps them to Betterment's business, and stays engaged with the professional community.

Qualifications

  • 6+ years of experience in security GRC, technology risk, technology audit, or security operations, with demonstrated senior-level ownership.
  • Expert-level depth in at least one security domain (e.g., vulnerability management, SDLC, application security, or cloud computing) plus broad horizontal skills.
  • Deep, hands-on command of security risk management: CIA triad, control design/operation, and one or more control governance frameworks (e.g., SOC 2, ISO 27001, NIST CSF).
  • Strong command of security controls for cloud computing and third-party SaaS (logical access management, due diligence/monitoring, vulnerability governance).
  • Fluency in audit reports and risk assessments, including testing with sampling and results reporting.
  • Ability to measure risk with professional judgment and drive acceptance or treatment within appetite (effective challenge).
  • Strong cross-disciplinary communication and relationship building, with a track record of influencing without authority across Engineering, business, Compliance, and Legal.
  • Moderate understanding of financial services operations and Product/Engineering.
  • Experience learning/applying new skills quickly, including through research and use of AI/automation.

Skills

Required:Security risk managementVulnerability managementIT governance frameworksCloud & third-party securityAudit & risk reportingCommunication & influence

Benefits

  • We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD&D insurance; short- and long-term disability; infertility support and transgender health benefits; EAP; transit benefits and FSA/HSA options
  • Equity for all employees, including new hire and refresher grants
  • Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in year six
  • Company-paid professional coaching for all employees
  • Day-one 401(k) match plus matching on qualified student loan payments
Last updated Oct 7, 2026. Interested? Apply on the company site.

About Betterment

Automated investing & Financial planning

Betterment can help grow your money by making saving and investing easy. Invest in a tailored portfolio, set buckets for your goals, and earn rewards.

investingfinancial planningsavingretirementtax-smart technologyinvestment portfolioscash management

More open roles at Betterment