Head of Security GRC

📋 Description

• Own the enterprise GRC program across a regulated broker-dealer.
• Align controls with NIST CSF, NIST 800-53, ISO 27001, SOC 2.
• Lead security metrics, KPI/KRI frameworks, and board reporting.
• Stand up threat intelligence and incident response; third-party due diligence.
• Partner with Legal, Privacy, Compliance; liaise with regulators.
• Drive cross-department initiatives; translate risk into business decisions.

🎯 Requirements

• 15+ years in information security/risk mgmt in regulated finance.
• Strong SEC/FINRA knowledge: Reg S-P, 17a-4, cyber disclosures.
• Global data protection expertise: GDPR, CCPA/CPRA, LGPD.
• End-to-end GRC program leadership; risk ownership.
• Experience with SOC 1, SOC 2, ISO 27001 audits.
• Threat intel, incident response planning, and runbooks.

🎁 Benefits

• Competitive pay, equity, and 401(k) match.
• Medical, dental, vision, and disability insurance.
• Paid parental leave and generous PTO/holidays.
• Wellness reimbursement and company-provided phone.
• Personal development allowance and training.
• Hybrid/remote work options.