Remote Lead, GRC & Security Governance - Flexible Hours

Dave; United States; Remote; USD 180,000 - 230,000; Full time

Benefits offered by this job

Home office stipend

Premium Medical, Dental, Vision

Generous parental and caregiver leave

401(k) with matching

Financial wellness support

Flexible PTO & holidays

All-company events

Job summary

Dave, a growing US fintech, seeks a Lead, GRC & Security Governance to build and run governance systems that keep the technology organization controlled, resilient, and audit-ready. This senior IC will own risk management, controls, incident governance, and business continuity across Security, IT, Engineering, and Data teams.

You will establish risk-based controls, run audits (SOC 2 Type II, ISO 27001), and drive remediation with practical accountability while maintaining human review and data

Qualifications

• 8+ years of technology experience with ownership in security governance, technology risk, or assurance.
• Led SOC 2 Type II, ISO 27001, or equivalent audit with a successful result.
• Built or rebuilt a governance, risk, or assurance operating model.
• Fluent across cloud, identity, CI/CD, source control, endpoints, networks and data platforms.
• Own accountability while technical teams handle remediation.
• Judgment on risk and materiality, with escalation when needed.
• Partnership experience with Internal Audit and Legal.
• Strong written communication and program management skills.

Responsibilities

• Build and operate the technology governance program across tech risk, IT controls, change, incident, and business continuity.
• Maintain technology control inventory with owners, evidence, cadence, exceptions, and escalation.
• Own technology assurance and audit readiness for frameworks such as SOC 2, ISO 27001, PCI.
• Coordinate evidence, support testing, identify gaps, and drive remediation accountability.
• Govern change, incident management, and business continuity with practical, repeatable processes.
• Leverage AI/automation to improve evidence analysis, control mapping, and risk reporting while preserving human review.

Skills

Governance program design

Technology risk management

Security assurance

Audit readiness

Program management

Cross-functional collaboration

Written communication

Decision making under risk

Tools

Vanta

Drata

Job description

Dave, a growing US fintech, seeks a Lead, GRC & Security Governance to build and run governance systems that keep the technology organization controlled, resilient, and audit-ready. This senior IC will own risk management, controls, incident governance, and business continuity across Security, IT, Engineering, and Data teams.

You will establish risk-based controls, run audits (SOC 2 Type II, ISO 27001), and drive remediation with practical accountability while maintaining human review and data