Remote Strategic GRC & Security Governance Lead

Openkrill; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Home office stipend

Premium Medical, Dental, and Vision

Generous parental and caregiver leave

401(k) matching

Flexible PTO and holidays

All-company virtual events

Job summary

Dave Operating LLC is seeking a Lead, GRC & Security Governance to build and run governance systems across technology risk, controls, assurance, incident governance, and business continuity. This senior IC role offers ownership across risk domains and collaboration with Security, IT, Engineering, and Legal to embed practical controls.

The role requires 8+ years in security governance and proven ability to drive audits (SOC 2, ISO 27001) and governance models, with strong communication and

Qualifications

• 8+ years of technology experience with ownership in security governance, technology risk, or security assurance.
• Experience leading a SOC 2 Type II, ISO 27001, or equivalent audit to a successful result.
• Experience rebuilding governance, risk, or assurance operating models.

Responsibilities

• Build and operate the technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies.
• Maintain technology control inventory with owners, evidence requirements, cadence, exceptions, and escalation paths.
• Own audit readiness and evidence collection for frameworks (SOX ITGC, PCI, SOC 2).
• Manage technology and cyber risk register and control exception processes with clear context and recommendations.
• Govern change management, incident management, and business continuity practices.
• Apply AI and automation to improve evidence analysis, control mapping, policy maintenance, risk reporting, and remediation tracking with human review.

Skills

Security governance

Technology risk

Audit readiness

SOC 2 / ISO 27001 experience

Cloud & CI/CD fluency

Stakeholder influence

Written communication

Program management

Tools

Vanta

Drata

Job description

Dave Operating LLC is seeking a Lead, GRC & Security Governance to build and run governance systems across technology risk, controls, assurance, incident governance, and business continuity. This senior IC role offers ownership across risk domains and collaboration with Security, IT, Engineering, and Legal to embed practical controls.

The role requires 8+ years in security governance and proven ability to drive audits (SOC 2, ISO 27001) and governance models, with strong communication and