Lead GRC, Security Governance

Job not on LinkedIn

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $174k - $224k / year

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dave

WebsiteLinkedInAll Job Openings

201 - 500 employees

💳 Fintech

🏦 Banking

👥 B2C

Fintech • Banking • B2C

Dave is a financial services company that aims to provide a fair and affordable banking experience for individuals who feel overlooked by traditional banks. The company was founded on the belief that banks have built products that are often predatory, exemplified by high overdraft fees. In an effort to combat this, Dave offers features like $500 advances, fee-free goal tracking, and support for individuals seeking side hustles to improve their financial situations. Their mission revolves around leveling the financial playing field and making financial solutions accessible to everyone.

📋 Description

• Build and operate Dave’s technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies • Establish and maintain the technology control inventory, including owners, evidence requirements, operating cadence, exceptions, and escalation paths • Own technology assurance and audit readiness for SOX ITGC, PCI, SOC 2, and other applicable frameworks • Coordinate evidence, support testing, identify gaps, and drive remediation accountability through closure • Own the technology and cyber risk register and control exception process • Surface material or sustained risks with context and recommendations, including when there is resistance to escalation • Govern change management, incident management, and business continuity • Use AI and automation to improve evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking while maintaining human review and data safeguards • Partner with Security, IT, Engineering, Data, Internal Audit, Legal, Compliance, and external assessors • Report to the Sr. Director, Security & IT

🎯 Requirements

• 8+ years of relevant technology experience, including significant ownership in security governance, technology risk, or security assurance • Personally led a SOC 2 Type II, ISO 27001, or equivalent audit through a successful result • Built or materially rebuilt a governance, risk, or assurance operating model • Strong technical fluency across cloud, identity, CI/CD, source control, endpoints, networks, and data platforms • Ability to turn ambiguous expectations into specific, testable controls and challenge imprecise answers • Experience owning accountability while technical teams own remediation • Ability to influence Engineering, SRE, Security, IT, and Data partners • Sound judgment around risk and materiality, including escalating meaningful risks when stakeholders disagreed • Experience partnering with Internal Audit and Legal • Strong written communication and program management skills • Experience with SOX ITGC, PCI DSS, NIST-based programs, AI governance or third-party AI risk, and GRC automation platforms such as Vanta or Drata is a bonus • Must be permanently authorized to work in the United States without visa sponsorship

🏖️ Benefits

• Equity • Flexible hours • Virtual-first work culture • Home office stipend • Premium Medical, Dental, and Vision Insurance plans • Generous paid parental and caregiver leave • 401(k) savings plan with matching contributions • Financial advisor and financial wellness support • Flexible PTO • Generous company holidays, including Juneteenth and Winter Break • All-company in-person events once or twice a year • Virtual events throughout to connect with team members and leadership