обновлено 4 дня назад
Senior GRC Program Manager (Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior GRC Program Manager (Fintech): Supporting customer security assurance for Ripple Treasury through security questionnaires, customer engagements, sales documentation, and DORA audit coordination with an accent on translating technical controls into clear, customer-ready answers. Focus on coordinating evidence across security, engineering, IT, legal, sales, and customer success while identifying security, compliance, and contractual risks.
Location: Chicago, Illinois, United States; hybrid work with in-office collaboration 10+ days per month
Company
builds crypto solutions for financial institutions, businesses, governments, and developers to improve global financial infrastructure.
What you will do
- Complete and review SIG, CAIQ, and custom customer security questionnaires, maintaining reusable approved responses.
- Meet with prospective and existing customers to explain the security program and support security aspects of deals and renewals.
- Create and maintain security sales collateral, trust center content, certification summaries, control mappings, and architecture and data-flow references.
- Coordinate customer-initiated DORA audits, including logistics, evidence collection, and communication with internal control owners.
- Partner with Information Security, Engineering, IT, Legal, Sales, and Customer Success to validate responses and represent the security and compliance posture accurately.
- Improve FAQs, standardized responses, and enablement materials while identifying and escalating security, compliance, and contractual risks.
Requirements
- 5+ years of experience in GRC, customer security assurance, or a related security function.
- Hands-on experience responding to customer security questionnaires and due diligence requests.
- Knowledge of SOC 2, ISO 27001, NIST, SWIFT, access control, encryption, vulnerability management, and vendor risk.
- Experience with financial services or FinTech customers and familiarity with GDPR, CCPA, and DORA.
- Strong written and verbal communication skills, with the ability to explain technical security concepts to non-technical audiences.
- Experience managing multiple customer engagements and using trust center, questionnaire automation, or GRC platforms such as SafeBase, Vanta, Drata, or LogiGate.
Nice to have
- Direct exposure to DORA.
- Certifications such as CISA, CISM, CISSP, or Security+.
Culture & Benefits
- Fast-paced startup environment with experienced industry leaders.
- Professional development budget and opportunities to work with current technologies.
- Flexible manager- and team-led in-office collaboration for 10+ days per month.
- Competitive salary, bonuses, equity, healthcare, retirement, family support, and mobile phone stipend.
- Vacation, R&R days, wellness reimbursement, parental leave, family planning benefits, catered lunches, and team events.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
9 дней назад
Senior GRC Analyst
120 000 - 150 000$
7 дней назад
Sr. GRC Engineer (AI)
133 400 - 160 000$
7 дней назад
GRC Analyst (Cloud Security)
Polymarket
10 дней назад
GRC and Privacy Lead (Cybersecurity)
150 000 - 200 000$
Clerk
6 дней назад
Senior GRC Engineer
7 дней назад