Lead GRC & Security Governance

You will build and run technology governance across cyber and technology risk, IT controls, change management, incident management, business continuity, and policies. You will maintain the control inventory, lead assurance and audit readiness, manage risk registers and control exceptions, and improve governance through automation with appropriate human review.

Responsibilities

• Build and operate the technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies
• Establish and maintain the technology control inventory, including owners, evidence requirements, operating cadence, exceptions, and escalation paths
• Lead technology assurance and audit readiness for SOX ITGC, PCI, SOC 2, and applicable frameworks
• Manage the technology and cyber risk register and control exception process
• Govern change management, incident management, and business continuity practices
• Use AI and automation to improve evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking

Requirements

• 8+ years of relevant technology experience with significant ownership in security governance, technology risk, or security assurance
• Experience personally leading a successful SOC 2 Type II, ISO 27001, or equivalent audit
• Experience building or materially rebuilding a governance, risk, or assurance operating model
• Technical fluency in cloud, identity, CI/CD, source control, endpoints, networks, and data platforms
• Experience influencing Engineering, SRE, Security, IT, and Data partners while they own remediation
• Experience escalating material risks and partnering with Internal Audit and Legal
• Strong written communication and program management skills

Benefits

• Equity
• Flexible hours
• Virtual-first work culture
• Home office stipend
• Medical, dental, and vision insurance
• Paid parental and caregiver leave
• 401(k) plan with matching contributions
• Financial advisor and financial wellness support
• Flexible PTO
• Company holidays
• All-company in-person and virtual events