Head of Security GRC & Regulatory Risk

DriveWealth; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

DriveWealth is seeking an experienced Head of Security GRC to lead governance, risk, and compliance in a regulated broker-dealer environment. You will shape policy, metrics, and executive reporting, aligning with SEC/FINRA requirements.

You’ll own risk assessments, third-party due diligence, incident response readiness, and regulatory liaison, translating technical risk into clear business decisions for the board.

Responsibilities

• Own and mature the enterprise GRC program across a regulated broker-dealer environment.
• Align controls with NIST CSF, NIST 800-53, ISO 27001, SOC 2, and CIS Controls.
• Lead policy, standard, and procedure library management and review cycles.
• Oversee security audits, examinations, and remediation tracking.
• Build security metrics and executive/board reporting for risk posture.
• Stand up threat intelligence, incident-response readiness, and third-party due diligence.

Job description

DriveWealth is seeking an experienced Head of Security GRC to lead governance, risk, and compliance in a regulated broker-dealer environment. You will shape policy, metrics, and executive reporting, aligning with SEC/FINRA requirements.

You’ll own risk assessments, third-party due diligence, incident response readiness, and regulatory liaison, translating technical risk into clear business decisions for the board.