Manager, Governance, Risk & Compliance (GRC) New York, New York, United States

Flex group; Australia; On-site; USD 137,000 - 156,000; Full time

Job summary

An innovative FinTech company is seeking a Governance, Risk & Compliance Manager to enhance its compliance programs. This pivotal role involves leading SOC 2 audit preparations, ensuring adherence to regulatory standards, and developing risk mitigation strategies. Join a dynamic team dedicated to transforming the rent payment experience and making a real impact in the financial services industry. With a hybrid work model, you'll collaborate closely with internal stakeholders while enjoying the flexibility of remote work. If you're passionate about compliance and risk management, this is the perfect opportunity to grow your career in a supportive environment.

Benefits

100% company-paid medical, dental, and vision

401(k) + company equity

Unlimited paid time off

13 company paid holidays

Parental leave

Flex Cares Program

Free Flex subscription

Qualifications

• 3+ years of experience in GRC or information security roles.
• Proven experience with SOC 2 audit preparation and compliance.

Responsibilities

• Lead SOC 2 audit preparation and compliance efforts.
• Conduct risk assessments and develop mitigation strategies.

Skills

GRC Management

Information Security

SOC 2 Compliance

Analytical Skills

Problem-Solving Skills

Communication Skills

Risk Assessment

Regulatory Compliance

Education

Bachelor's degree in Information Security

Bachelor's degree in Computer Science

Tools

Vanta

Job description

Manager, Governance, Risk & Compliance (GRC)

New York, New York, United States

Flex is a growth-stage, NYC headquartered FinTech company that is creating the best rent payment experience. It’s hard to believe that it’s 2025 and paying rent on time is expensive, inflexible, and difficult. We’re here to change that! Flex enables our users to pay rent throughout the month on a schedule that better fits their finances and budget. Our mission is to empower as many renters as possible with flexibility over their most significant recurring expense. After deliberately keeping a stealth profile as we built up unprecedented investor support and an enthusiastic user base, we are looking for motivated individuals to help us keep our mission growing. Will you be a part of the team?

About the role

As the GRC Manager reporting directly to the Head of Security, you will play a pivotal role in shaping and maintaining the organization's governance, risk, and compliance programs. Your expertise will be crucial in ensuring adherence to regulatory requirements, industry standards, and internal policies.

This is a hybrid position with on-site expectations of 3 days per week in our New York Headquarters. For candidates outside of the NY/NJ area, you may be eligible for our relocation assistance program.

What you’ll do

• Lead SOC 2 audit preparation and ongoing compliance efforts
• Utilize Vanta to automate and streamline compliance processes
• Contribute to the implementation and maintenance of NIST Cybersecurity Framework (CSF) controls
• Assist in ensuring compliance with NYDFS Cybersecurity Regulations
• Conduct risk assessments and develop mitigation strategies
• Create and update policies, procedures, and controls documentation
• Collaborate with internal stakeholders to support the implementation and monitoring of security controls
• Assist in preparing comprehensive reports for management on compliance status and risk exposure
• Stay informed about evolving regulatory requirements and industry best practices, sharing insights with the team

Required qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field
• Minimum 3 years of experience in GRC, information security, or related roles
• Proven experience with SOC 2 audit preparation and compliance
• Proficiency with Vanta or similar compliance automation tools
• Strong knowledge of NIST CSF and NYDFS Cybersecurity Regulations
• Excellent analytical and problem-solving skills
• Outstanding written and verbal communication abilities
• Fluency in English at the C2 level
• Self-motivated with the ability to work independently in a remote environment

Preferred qualifications

• ISACA CISA certification
• Experience in the fintech or financial services industry
• Familiarity with other frameworks such as ISO 27001, GDPR, or PCI DSS

The compensation range for this role will be commensurate with the candidate's experience and Flex's internal leveling guidelines and benchmarks.

• For working locations in NY/NJ/CA, the base salary pay range will be $137,000-$156,000

Life at Flex:

We understand that it takes a diverse team of highly intelligent, curious, determined, empathetic, and self aware people to grow a successful company. Our HQ is located in New York City, but we have employees located throughout the US, Australia, Canada and South America. We are growing quickly, but deliberately, with a focus on building an inclusive culture. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity workplace.

We offer many employee benefits. For full time, U.S. based employees we offer:

• Competitive pay
• 100% company-paid medical, dental, and vision
• 401(k) + company equity
• Unlimited paid time off with a PTO minimum + 13 company paid holidays
• Parental leave
• Flex Cares Program: Non-profit company match + pet adoption coverage
• Free Flex subscription

For full time non-US employees, we offer

• Competitive Pay
• Company Equity
• Unlimited PTO

Apply for this job

* indicates a required field

First Name *

Last Name *

Email *

Phone *

Resume/CV *

LinkedIn Profile

Website

Are you willing to work out of our Union Square (NY,NY) office 3 days a week? * Select...

Are you authorized to work in the United States? * Select...

Will you now, or in the future, require sponsorship for employment visa status (e.g. H-1B visa status)? * Select...

Does your salary fall within our estimated range for this role? If not, please specify your salary request. * Select...