Security GRC Leader: Governance, Risk & Compliance

Quiet Capital; Colorado; On-site; USD 270,000 - 290,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Paid parental leave

Wellness reimbursement

Company phone

Personal development allowance

Paid time off

Holidays

Job summary

DriveWealth is seeking an experienced Head of Security GRC to lead governance, risk, and compliance across a regulated broker-dealer environment. You will own security metrics, executive reporting, and incident-response readiness while partnering with legal, privacy, and compliance teams.

The role requires deep knowledge of SEC/FINRA regulations, global data protection laws, and established security frameworks. It is open to candidates nationwide in the United States with remote work options.

Qualifications

• Experience leading GRC programs in regulated financial services environments.
• Ability to translate security risk into business decisions for executives.
• Familiarity with SEC/FINRA, GDPR/CCPA, and security frameworks.

Responsibilities

• Lead governance, risk, and compliance across a broker-dealer environment.
• Own security metrics, executive dashboards, and board reporting.
• Oversee incident response planning, runbooks, and tabletop exercises.
• Manage third-party and client cyber due diligence.
• Coordinate with Legal, Privacy, and Compliance teams on regulatory adherence.
• Interface with regulators and enterprise partners on security matters.

Skills

GRC program ownership

Regulatory compliance

Risk management

Security metrics/board reporting

Threat intelligence

Incident response readiness

Third-party risk management

Communication with regulators

Job description

DriveWealth is seeking an experienced Head of Security GRC to lead governance, risk, and compliance across a regulated broker-dealer environment. You will own security metrics, executive reporting, and incident-response readiness while partnering with legal, privacy, and compliance teams.

The role requires deep knowledge of SEC/FINRA regulations, global data protection laws, and established security frameworks. It is open to candidates nationwide in the United States with remote work options.