Chief Security & GRC Officer

DriveWealth Holdings, Inc.; Austin (TX); Remote; USD 270,000 - 290,000; Full time

Benefits offered by this job

Medical insurance

401(k) match

Paid Parental Leave

Wellness reimbursement

Company phone

Job summary

DriveWealth seeks an experienced Head of Security GRC to lead governance, risk, and compliance in a regulated broker‑dealer environment. You will own security metrics, executive reporting, and incident‑response readiness, aligning security outcomes with business objectives.

Reporting to the CISO, you will drive audits, risk assessments, and third‑party due diligence while partnering with Legal, Privacy, and Compliance to ensure regulatory adherence across global data‑protection laws and industry

Qualifications

• Extensive experience leading GRC programs in regulated financial services environments.
• Strong understanding of SEC/FINRA regulations and cyber disclosure obligations.
• Proven ability to translate security risk into business impact for execs and boards.
• Hands-on leadership of audits, risk assessments, and control testing.
• Experience building KPIs/KRIs and executive reporting packages.
• Proven vendor risk management and third‑party due diligence.

Responsibilities

• Lead enterprise GRC program across governance, risk, and compliance.
• Own security metrics, executive dashboards, and board reporting.
• Drive incident response readiness and develop runbooks for high‑priority scenarios.
• Oversee regulatory examinations, audits, and evidence collection.
• Manage third‑party risk programs and vendor due diligence.
• Collaborate with Legal, Privacy, and Compliance to ensure end‑to‑end adherence.
• Set testing cadence and remediation tracking across control owners.

Skills

GRC leadership

Risk management

Regulatory compliance

Executive reporting

Incident response

Vendor risk management

Security governance

Tools

GRC platforms

BI tooling

Job description

DriveWealth seeks an experienced Head of Security GRC to lead governance, risk, and compliance in a regulated broker‑dealer environment. You will own security metrics, executive reporting, and incident‑response readiness, aligning security outcomes with business objectives.

Reporting to the CISO, you will drive audits, risk assessments, and third‑party due diligence while partnering with Legal, Privacy, and Compliance to ensure regulatory adherence across global data‑protection laws and industry