Senior GRC & Security Governance Leader — Remote

jobgether; New York (NY); Remote; USD 174,000 - 224,000; Full time

Benefits offered by this job

Remote-first culture

Home office stipend

Comprehensive healthcare

401(k) with company match

Parental and caregiver leave

Generous PTO and holidays

Job summary

Partner Company is seeking a Lead GRC & Security Governance professional in the United States to build and lead governance frameworks for technology risk management, security assurance, and operational resilience. You will own risk registers, control inventories, and audit readiness while collaborating with Legal, Internal Audit, and external assessors.

You will define practical policies for change, incident management, and business continuity, and explore AI-enabled workflows with proper data

Qualifications

• Extensive technology governance, risk management, or security assurance experience.
• Proven leadership of audit programs (SOC 2 Type II, ISO 27001, or equivalent).
• Experience redesigning governance/ risk operating models and ownership structures.
• Fluency in cloud, IAM, CI/CD, data platforms, networks, and endpoints.
• Ability to translate requirements into precise, testable controls and evidence.
• Strong risk management, escalation, and stakeholder communication.

Responsibilities

• Build and lead a technology governance program covering risk, IT controls, change, incident, continuity, and policies.
• Maintain a centralized control inventory with owners, evidence, schedules, and escalation paths.
• Lead audit readiness across SOC 2, ITGC, PCI, and related frameworks; coordinate testing and remediation.
• Manage technology and cybersecurity risk registers and communicate material risks to decision makers.
• Establish clear accountability for control owners and technical teams; ensure remediation ownership stays with teams.
• Govern change and incident management with practical policies and oversight.
• Oversee business continuity and resilience through governance requirements.
• Identify and implement AI-assisted workflows for evidence analysis, control mapping, and risk reporting.
• Collaborate with Security, IT, Engineering, SRE, Data, Compliance, Legal, Internal Audit, and external assessors.
• Escalate material risks with independent judgment and timely visibility.
• Develop scalable governance processes with documentation, reporting, and performance indicators.
• Drive continuous improvement to keep controls practical and sustainable.

Skills

Governance leadership

Audit leadership

Cross-functional influence

Written communication

Program management

Independent ownership

Risk assessment

SOX/ITGC/PCI familiarity

AI governance awareness

Job description

Partner Company is seeking a Lead GRC & Security Governance professional in the United States to build and lead governance frameworks for technology risk management, security assurance, and operational resilience. You will own risk registers, control inventories, and audit readiness while collaborating with Legal, Internal Audit, and external assessors.

You will define practical policies for change, incident management, and business continuity, and explore AI-enabled workflows with proper data