Remote Lead, GRC & Security Governance

VulnU; Northern (KY); À distance; USD 174 000 - 224 000; Plein temps

Avantages offerts par ce poste

Paid parental leave

Flexible PTO

Retirement match

Home-office stipend

Résumé du poste

Dave is seeking a Lead, GRC & Security Governance to design and run the governance systems for its technology organization. You will drive risk-based controls, enable audit readiness, and partner with Security, IT, Engineering, and Legal to implement practical, scalable governance.

You will not handle remediation but will define requirements and accountability across teams. The role offers significant ownership, remote work, and opportunities to shape a growing fintech’s risk posture while

Qualifications

• 8+ years of relevant technology experience with ownership in security governance, technology risk, or security assurance.
• Led a SOC 2 Type II, ISO 27001, or equivalent audit to a successful result.
• Built or rebuilt a governance, risk, or assurance operating model.
• Strong technical fluency across cloud, identity, CI/CD, endpoints, networks, and data platforms.
• Ability to translate ambiguous requirements into specific, testable controls.
• Experience partnering with Internal Audit and Legal in addition to technical teams.

Responsabilités

• Build and operate Dave’s technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies.
• Establish and maintain technology control inventory with ownership, evidence requirements, cadence, exceptions, and escalation.
• Own technology assurance and audit readiness across programs including SOX ITGC, PCI DSS, SOC 2, and other applicable frameworks.
• Coordinate evidence, support testing, identify gaps, and drive remediation accountability through closure.
• Govern change management, incident management, and business continuity so expectations are practical, consistently followed, tested, and improved over time.
• Use AI and automation thoughtfully to improve evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking while maintaining appropriate human review and data safeguards.

Connaissances

Security governance

Technology risk

Security assurance

Audits

Program management

Written communication

Outils

Vanta

Drata

Description du poste

Dave is seeking a Lead, GRC & Security Governance to design and run the governance systems for its technology organization. You will drive risk-based controls, enable audit readiness, and partner with Security, IT, Engineering, and Legal to implement practical, scalable governance.

You will not handle remediation but will define requirements and accountability across teams. The role offers significant ownership, remote work, and opportunities to shape a growing fintech’s risk posture while