Director, GRC & Vendor Risk (Hybrid)

Candescent; Atlanta (GA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid position

Job summary

Candescent is seeking an experienced Director of Governance, Risk, Compliance & Vendor Management to lead audit, compliance, third-party risk management, and vendor governance for banking and fintech clients. This role drives a strong control environment, ensuring regulatory and contractual security obligations are met across internal teams and external partners.

The leader will helm external audits, customer due diligences, and executive reporting, while mentoring a high-performing team and

Qualifications

• Bachelor's degree in a relevant field and deep experience leading GRC programs.
• Proven track record delivering SOC 2 Type II and PCI DSS audits.
• Strong knowledge of US banking regulations and third-party risk governance.

Responsibilities

• Lead Governance, Risk, Compliance, Third-Party Risk Management, and Vendor Management programs.
• Oversee SOC 2 Type II, PCI DSS, customer audits, and regulatory examinations.
• Ensure compliance with banking, security, and privacy requirements (FFIEC/GLBA/PCI).
• Direct the vendor lifecycle: onboarding, risk assessments, monitoring, contracts, offboarding.
• Develop executive reporting on audit readiness, vendor risk, and remediation.

Skills

SOC 2 Type II audit

PCI DSS

Vendor risk management

Banking regulations (FFIEC/GLBA)

Leadership

Audits & remediation

Education

Bachelor's degree in Information Systems, Cybersecurity, Finance, Accounting, or related field

Job description

Candescent is seeking an experienced Director of Governance, Risk, Compliance & Vendor Management to lead audit, compliance, third-party risk management, and vendor governance for banking and fintech clients. This role drives a strong control environment, ensuring regulatory and contractual security obligations are met across internal teams and external partners.

The leader will helm external audits, customer due diligences, and executive reporting, while mentoring a high-performing team and