Senior InfoSec GRC Lead — Risk & Compliance

Betterment; New York (NY); On-site; USD 165,000 - 230,000; Full time

Benefits offered by this job

Equity for everyone

401(k) match

Comprehensive health coverage

Paid parental leave

Sabbatical

In-office culture

Coaching & development

Employee Resource Groups

Job summary

Betterment is seeking a Senior Information Security professional to lead governance, risk, and compliance initiatives within the Govern &' Control team. You will own risk management processes, mentor analysts, and serve as a trusted advisor to leadership across engineering, business lines, Compliance, and Legal.

The role operates as a senior individual contributor with oversight of key risk areas including vulnerability management, third-party risk, continuity planning, and risk reporting.

Qualifications

• Expert-level depth in at least one security domain (e.g., vulnerability management, SDLC, application security, or cloud computing).
• T-shaped profile with broad horizontal skills across the business.
• 6+ years of experience in security GRC, technology risk, technology audit, or security operations.
• Strong understanding of financial services operations and product/engineering interactions.
• Experience mentoring analysts or auditors and leading governance committees.

Responsibilities

• Own and mature risk management processes underpinning client, investor, and regulator trust.
• Lead major program areas with limited supervision and own outcomes and OKRs.
• End-to-end risk assessment leadership with data-supported conclusions.
• Design and document complex internal controls; drive automation and tooling.
• Provide effective challenge to engineering partners and mature risk processes with Compliance and Legal.
• Act as escalation point for junior analysts to raise output quality and consistency.
• Stay ahead of regulatory changes and map trends to Betterment's business.

Skills

GRC expertise

Risk management

Security risk assessment

Vulnerability management

Third-party risk

Cloud security

Security controls

Audit coordination

Stakeholder influence

Leadership / mentoring

Education

CISSP

CISA

CISM

AWS Cloud certifications

Tools

SOC 2

ISO 27001

NIST CSF

Job description

Betterment is seeking a Senior Information Security professional to lead governance, risk, and compliance initiatives within the Govern &' Control team. You will own risk management processes, mentor analysts, and serve as a trusted advisor to leadership across engineering, business lines, Compliance, and Legal.

The role operates as a senior individual contributor with oversight of key risk areas including vulnerability management, third-party risk, continuity planning, and risk reporting.