Senior Security Policy Management Lead

Robinhood; Toronto; On-site; CAD 131,000 - 155,000; Full time

Job summary

Join a leading fintech company, Robinhood, as a Security Policy Management Lead in Toronto. You will shape the organization's security governance framework, manage policies, and collaborate with teams across the business. This critical role requires strong governance experience and technical acumen to support Robinhood's commitment to secure financial innovation.

Qualifications

• 5+ years in governance, risk, and compliance roles.
• Experience in highly regulated environments.
• CISSP, CISM, ISSMP, or similar certification is preferred.

Responsibilities

• Own the lifecycle of security and privacy policies.
• Lead the governance documentation and exception processes.
• Collaborate with cross-functional teams to validate policy supporting controls.

Skills

Governance, Risk, and Compliance (GRC)

Technical Writing

Policy Development

Problem Solving

Education

Bachelor's degree in Computer Science, Engineering, Information Systems, Finance, or related fields

Tools

GRC Tools

Job description

Join a leading fintech company that’s democratizing finance for all.

Robinhood Markets was founded on a simple idea: that our financial markets should be accessible to all. With customers at the heart of our decisions, Robinhood and its subsidiaries and affiliates are lowering barriers and providing greater access to financial information. Together, we are building products and services that help create a financial system everyone can participate in.

With growth as the top priority...

The business is seeking curious, growth-minded thinkers to help shape our vision, structures and systems; playing a key-role as we launch into our ambitious future. If you’re invigorated by our mission, values, and drive to change the world — we’d love to have you apply.

About the role

As the Security Policy Management Lead, you will play a critical role in shaping and maintaining the foundation of our enterprise’s security and privacy governance. You will own the lifecycle of our corporate-wide security and privacy policies, standards, and procedures—ensuring they remain current, actionable, and aligned with industry trends, evolving regulatory expectations, and business needs. This role is central to how our organization manages technology-related risk, working cross-functionally with policy owners, subject matter experts, corporate compliance, and enterprise risk management teams to build and sustain a robust governance framework.

Beyond policy upkeep, you'll lead the security exception program—tracking temporary deviations from policy and ensuring each exception is evaluated, documented, and resolved in a risk-informed manner. Success in this role requires a strong understanding of the interplay between technology, security, and privacy, paired with exceptional organizational skills and a passion for problem-solving.

You will champion efficiency in policy management processes, identify bottlenecks, and proactively drive improvements through both collaboration and automation. Your ability to build strong partnerships across technical, legal, compliance, and governance teams will be vital in supporting Robinhood secure and continued growth.

While this role is currently an individual contributor within the Robinhood Security Risk and Resilience organization, you will build a cross divisional team of experts and partners to deliver on the program objectives. As the company grows and needs are identified you may be asked to build and supervise a small team.

Your day-to-day will involve:

• Assessing the current state of governance documentation and exception processes and creating a detailed plan to deliver the objectives of the program
• Collaboratively editing policies, standards, operational procedures
• Meeting with partners to review and obtain approvals for policies and standards
• Partnering with our Security Risk Assessment teams to validate policy supporting controls and efficient exception documentation
• Tracking regulations and industry trends to incorporate into our policy documents as needed

About you:

• Bachelor's degree or equivalent experience in Computer Science, Engineering, Information Systems, Finance, or related fields
• 5+ years of experience in governance, risk, and compliance (GRC) roles with a focus on Policy and Standards compliance.
• Experience writing security and engineering policies and standards
• Experience building sophisticated cross-functional programs
• Excellent technical writing skills
• Experience working in a fast paced technology focused company
• Experience in a highly regulated environment and/or public companies
• Experience with adapting off-the-shelf GRC tools to program needs
• CISSP, CISM, ISSMP, or similar certification
• Team lead experience and interest in building teams

Base pay for the successful applicant will depend on a variety of job-related factors, which may include education, training, experience, location, business needs, or market demands. The expected salary range for this role is based on the location where the work will be performed. This role is also eligible to participate in a Robinhood bonus plan and Robinhood’s equity plan.

Toronto, ON

$131,750 - $155,000 CAD

Click here to learn more about available Benefits, which vary by region and Robinhood entity.

We’re looking for more growth-minded and collaborative people to be a part of our journey in democratizing finance for all. If you’re ready to give 100% in helping us achieve our mission—we’d love to have you apply even if you feel unsure about whether you meet every single requirement in this posting. At Robinhood, we're looking for people invigorated by our mission, values, and drive to change the world, not just those who simply check off all the boxes.

Robinhood embraces a diversity of backgrounds and experiences and provides equal opportunity for all applicants and employees. We are dedicated to building a company that represents a variety of backgrounds, perspectives, and skills. We believe that the more inclusive we are, the better our work (and work environment) will be for everyone. Additionally, Robinhood provides reasonable accommodations for candidates on request and respects applicants' privacy rights. Please review the specific Robinhood Privacy Policy applicable to the country where you are applying.

Create a Job Alert

Interested in building your career at Robinhood? Get future opportunities sent straight to your email.

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

LinkedIn Profile *

What is your preferred office location? * Select...

Do you have the unrestricted right to work in the country where this role is located? * Select...

How did you hear about this job?

Have you used Robinhood? Select...

Website

Have you ever worked for Robinhood as an employee, intern or contractor? * Select...

Please review and acknowledge the specific Robinhood Applicant Privacy Policy applicable to the country where you are applying. * Select...

Do you have:a) any Personal/Familial Relationships (current Robinhood employees or employees of Robinhood’s vendors);b) any Outside Business Activities that you wish to continue;c) any investment that is greater than 5% of the outstanding shares of a publicly-traded company;d) any investment in a private company that has a business relationship or that is a current competitor of Robinhood; ore) any Intellectual Property Ownership (patents, trademarks, copyrights) that you wish to retain and/or create/develop while at Robinhood? * Select...

If you answered "Yes" to the above question, please provide additional information here:

Robinhood adheres to applicable laws and regulations in relation to government officials given inherent bribery and/or corruption risk. A government official is any person that performs a public function on any level or acts in any official capacity on behalf of a government or government owned entity.a) Do you currently hold or have you held, within the last 5 years, a position as a government official?b) Have you been referred or recommended for this position by a government official?c) Are you related to or have a close personal relationship with a government official? * Select...

If you answered "Yes" to the above question, please provide additional information here: