VP of Governance, Risk & Compliance

Tiro Security; Los Angeles (CA); Hybride; USD 180 000 - 220 000; Plein temps

Résumé du poste

Tiro Security is seeking a Vice President of GRC to lead the cybersecurity governance, risk, and compliance program. Reporting to the CISO, you will set strategy, mature GRC processes, and drive risk assessments, audits, and third-party risk.

This is a senior, hands-on leadership role in financial services, requiring 7+ years in security and GRC, with knowledge of SEC/FINRA/SOX. The position offers a hybrid work arrangement near Los Angeles, with base salary up to $200k and total comp up to

Qualifications

• 3+ years of recent, hands-on GRC leadership experience within financial services.
• 7+ years total in cybersecurity, IT risk, or compliance.
• Strong regulatory knowledge and proven track record in building and managing GRC programs.
• Excellent leadership, communication, and collaboration skills.

Responsabilités

• Be the firm’s primary GRC lead, reporting to the CISO.
• Lead governance, risk, and compliance programs across the enterprise.
• Ensure alignment with strict financial regulations (SEC, FINRA, GLBA, SOX, NYDFS 500, etc.).
• Conduct and oversee risk assessments, SOC 1/2 audits, and third-party/vendor risk programs.
• Take a hands-on role in building and maturing GRC processes, with the opportunity to grow and lead a team over time.
• Collaborate with senior leadership to maintain a strong, business-aligned security posture.

Connaissances

GRC leadership

Cybersecurity

Regulatory knowledge

Leadership & communication

Description du poste

Overview

Our client is a leading financial services firm hiring a Vice President of GRC to join its cybersecurity team. This role reports directly to the CISO. It is fully remote in most states, but for those within commuting distance to Los Angeles, it will be a hybrid arrangement (3 days in the office). Compensation is location-dependent, with a base salary of up to $200,000 and total compensation of up to $280,000.

The role

• Be the firm’s primary GRC lead, reporting to the CISO.
• Lead governance, risk, and compliance programs across the enterprise.
• Ensure alignment with strict financial regulations (SEC, FINRA, GLBA, SOX, NYDFS 500, etc.).
• Conduct and oversee risk assessments, SOC 1/2 audits, and third-party/vendor risk programs.
• Take a hands-on role in building and maturing GRC processes, with the opportunity to grow and lead a team over time.
• Collaborate with senior leadership to maintain a strong, business-aligned security posture.

The profile

• 3+ years of recent, hands-on GRC leadership experience within financial services (asset management, banking, or insurance) - THIS IS ESSENTIAL.
• 7+ years total in cybersecurity, IT risk, or compliance.
• Strong regulatory knowledge and proven track record in building and managing GRC programs.
• Excellent leadership, communication, and collaboration skills.

This is an opportunity to own and shape the GRC function, while remaining hands-on and building a strong foundation for future team growth.

Seniority level

• Director

Employment type

• Full-time

Job function

• General Business

Industries

• Financial Services and Insurance

We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.