Head of GRC & InfoSec — Remote (FinTech)

JustMarkets; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Remote work opportunity

Professional education budget

Language learning budget

Wellness budget (gym membership, gear)

Job summary

JustMarkets is seeking an experienced Head of Information Security GRC to lead and evolve our governance, risk and compliance function in a growing FinTech. This hands-on leadership role shapes the GRC operating model, roadmap, and core processes while collaborating with Security, Legal, Risk, IT, Engineering, Product, and business teams.

You will build practical controls, oversee audits, and drive risk-based decisions, with a focus on scalable, repeatable processes and automation.

Qualifications

• Strong practical experience in Information Security GRC, cyber/technology risk, security compliance, or assurance.
• Hands-on experience with frameworks such as SOC 2, ISO 27001, DORA, PCI DSS, NIST CSF, COBIT, or similar.
• Experience establishing or operating security controls, risk registers, exception processes, and assurance programs.
• Ability to translate regulatory and security requirements into practical controls and processes.
• Strong stakeholder management skills for technical, business, and executive audiences.
• Experience leading a team, function, program, or cross-functional initiatives.

Responsibilities

• Own and develop the Information Security GRC strategy, roadmap, operating model, and governance cadence.
• Lead security governance, regulatory assurance, cyber risk, and third-party risk oversight.
• Establish ownership for security controls, risks, exceptions, evidence, and remediation actions.
• Coordinate audits and regulatory requests (SOC 2, DORA/CySEC) and assurance activities.
• Maintain risk registers and ensure material risks are treated, accepted, or escalated.
• Develop security policies, standards, controls, and guidance.
• Prepare concise GRC and risk reporting for CISO and executives.
• Build and manage the GRC team with clear goals and performance expectations.

Skills

Information Security GRC

SOC 2

ISO 27001

DORA

PCI DSS

NIST CSF

COBIT

Audits coordination

Policy development

Stakeholder management

Cloud/infrastructure/identity security

Team leadership

Job description

JustMarkets is seeking an experienced Head of Information Security GRC to lead and evolve our governance, risk and compliance function in a growing FinTech. This hands-on leadership role shapes the GRC operating model, roadmap, and core processes while collaborating with Security, Legal, Risk, IT, Engineering, Product, and business teams.

You will build practical controls, oversee audits, and drive risk-based decisions, with a focus on scalable, repeatable processes and automation.