Lead GRC and Security Governance

Job Summary

To build and operate a comprehensive governance program, the full-time Lead GRC and Security Governance will manage technology risk, controls, and assurance while working remotely to ensure audit readiness and effective incident management.

Key responsibilities

• Build and maintain the technology governance program, focusing on risk management, IT controls, and business continuity
• Establish and oversee the technology control inventory, ensuring clear ownership and compliance with evidence requirements
• Coordinate technology assurance and audit readiness, driving accountability for remediation across various compliance frameworks

Required qualifications

• 8+ years of relevant technology experience with significant ownership in security governance or technology risk
• Proven experience leading successful SOC 2 Type II, ISO 27001, or equivalent audits
• Strong technical fluency across cloud environments, CI/CD, and data platforms
• Demonstrated ability to influence technical teams while maintaining accountability for governance outcomes
• Experience partnering with Internal Audit and Legal teams, alongside technical security teams