Lead GRC & Security Governance

📋 Description

• Build and operate Dave's technology governance program across technology and cyber risk, IT
• Establish and maintain our technology control inventory, with clear owners, evidence requirements
• Own technology assurance and audit readiness across programs including SOX ITGC, PCI, SOC 2, and
• Own the technology and cyber risk register and control exception process.
• Govern change management, incident management, and business continuity so expectations are
• Use AI and automation thoughtfully to improve evidence analysis, control mapping, policy

🎯 Requirements

• 8+ years of relevant technology experience, including significant ownership in security governance
• Personally led a SOC 2 Type II, ISO 27001, or equivalent audit through a successful result.
• Built or materially rebuilt a governance, risk, or assurance operating model.
• Strong technical fluency across environments such as cloud, identity, CI/CD, source control
• Experience owning accountability while technical teams own remediation.
• Sound judgment around risk and materiality, including demonstrated experience escalating meaningful

🎁 Benefits

• Opportunity to tackle tough challenges, learn and grow from fellow top talent, and help millions of
• Flexible hours and virtual-first work culture with a home office stipend
• Premium Medical, Dental, and Vision Insurance plans
• Generous paid parental and caregiver leave
• 401(k) savings plan with matching contributions
• Financial advisor and financial wellness support