Head of Security, GRC

Jobtailor; California (MO); On-site; USD 200,000 - 280,000; Full time

Job summary

Jobtailor is seeking a Senior Director of Governance, Risk, and Compliance to lead our GRC program for a regulated financial services environment. You will own security metrics, executive reporting, and alignment with SEC/FINRA obligations and global data protection laws.

You will establish threat intelligence capabilities, manage audits and examinations, oversee vendor risk, and collaborate with regulators and business units to strengthen security across the enterprise.

Qualifications

• 15+ years in information security or risk management within regulated financial services.
• Deep understanding of SEC/FINRA regulations for broker-dealers.
• Experience leading GRC programs and risk initiatives.
• Proven ability to own SOC 1/2 and ISO 27001 audits.
• Ability to develop security KPIs/KRIs for executives.

Responsibilities

• Lead governance, risk, and compliance program.
• Ensure alignment with SEC/FINRA and data-protection laws.
• Own security metrics and executive reporting.
• Establish cyber threat intelligence capabilities.
• Manage internal and external security audits.
• Maintain Incident Response Plan (IRP).
• Oversee vendor risk management.
• Engage regulators and partners on security.
• Serve as security compliance SME.

Skills

GRC Leadership

SEC/FINRA Regulations

Global Data Privacy

Threat Intelligence

Incident Response Planning

Third-Party Risk Management

Executive Reporting

Security Audits

Communication & Leadership

Job description

• Lead the organization's governance, risk, and compliance program
• Ensure alignment with SEC/FINRA obligations and global data-protection laws
• Own security metrics and executive or board reporting
• Establish and run cyber threat intelligence capabilities
• Manage internal and external security audits and examinations
• Own and maintain the Incident Response Plan (IRP)
• Oversee vendor risk management processes
• Engage with internal business units, regulators, and external partners on security matters
• Act as subject-matter expert for security compliance

Requirements

• 15+ years of experience in information security, risk management, or cybersecurity roles in a regulated financial-services environment
• Strong understanding of SEC/FINRA regulations applicable to broker-dealers
• Expertise in global data-protection laws (GDPR, CCPA/CPRA, LGPD)
• Hands-on experience leading GRC programs and risk-management initiatives
• Ownership of SOC 1, SOC 2, and ISO 27001 examinations and compliance auditsExperience building security KPIs/KRIs and executive or board-level reporting
• Knowledge of threat intelligence, incident-response planning, and runbook development
• Proven third-party risk management and client/partner security due-diligence
• Excellent communication and leadership skills

Core Competencies

Demonstrates extensive expertise in leading governance, risk, and compliance programs within regulated financial services, ensuring alignment with SEC/FINRA regulations and global data-protection laws. Proven ability to manage security audits, incident response planning, and vendor risk management while effectively communicating with stakeholders.

Highest-signal resume keywords

• Governance, Risk, And Compliance (GRC)
• SEC/FINRA Regulations
• Global Data-Protection Laws
• Incident Response Planning
• Third-Party Risk Management

ATS Optimization Keywords

Hard Skills

• Information Security
• Risk Management
• Cybersecurity
• Security Audits
• Security Metrics
• Threat Intelligence
• KPI/KRI Development
• SOC 1 Compliance
• SOC 2 Compliance
• ISO 27001 Compliance

Soft Skills

• Excellent Communication
• Leadership Skills

Industry Keywords

• Financial Services
• Regulated Environment
• Data-Protection Laws
• Cyber Threat Intelligence
• Vendor Risk Management