Lead GRC & Security Governance
Dave · Remote · United States ·
COMPENSATION
$174k – $224k
Listed on the employer's job board (Ashby)
- Lead GRC role
- Fully remote (US)
- Fintech industry
- SOC 2 & PCI focus
- Senior IC position
You will establish and operate Dave’s technology governance program, covering cyber risk, IT controls, and business continuity. The role involves defining accountability, managing audit readiness for frameworks like SOC 2 and PCI, and ensuring material risks are escalated effectively.
This is a new function where you will shape how governance works across Security, Engineering, and Data teams. You will leverage automation for evidence analysis and control mapping while maintaining strong human oversight and data safeguards.
What you'll do
- Build and operate technology governance across risk, controls, and incident management
- Maintain technology control inventory with clear owners and escalation paths
- Manage audit readiness for SOX ITGC, PCI, SOC 2, and other frameworks
- Own the technology risk register and drive remediation accountability
- Govern change management and business continuity processes
- Use AI and automation to improve evidence analysis and reporting
What you'll need
- 8+ years in technology experience with ownership in security governance or risk
- Led a SOC 2 Type II, ISO 27001, or equivalent audit to successful completion
- Built or rebuilt a governance, risk, or assurance operating model
- Technical fluency in cloud, identity, CI/CD, and data platforms
- Experience influencing technical teams without owning remediation tasks
- Strong judgment in escalating material risks despite stakeholder resistance
- Proven partnership with Internal Audit, Legal, and technical teams
Nice to have
- Experience with SOX ITGC and PCI DSS frameworks
- Knowledge of NIST-based programs and AI governance
- Familiarity with GRC automation platforms like Vanta or Drata
Stack
- Vanta
- Drata
How you'll work
- Fully remote within the United States
- Residents of Hawaii are excluded
- Virtual-first company culture
- Flexible working hours
What you get
- Premium medical, dental, and vision insurance
- 401(k) savings plan with matching contributions
- Generous paid parental and caregiver leave
- Home office stipend provided
- Flexible PTO and company holidays
- Financial advisor and wellness support
- Annual in-person company events