Lead GRC & Security Governance

Dave

8d • $174,000 - $224,000 • Remote

About The Position

Dave is a financial app on a mission to build products that level the financial playing field. It is redefining the financial landscape by leveraging technology to create an affordable, transparent, and user-centric access to liquidity for millions of Americans. As a leading innovator in the U.S. financial services sector, Dave’s digital financial platform offers products designed to meet the credit needs of those underserved by traditional financial institutions. Dave’s offerings include its flagship ExtraCash product, providing members up to $500 within minutes. The company is on track to launch several new product offerings in 2026, including a Buy Now Pay Later (BNPL) option. Dave is focused on serving Americans who are financially vulnerable or living paycheck to paycheck. Dave is leading the charge in creating a new era of credit products that prioritizes speed, affordability, and accessibility, making it the go-to financial partner for those who need it most. We’re hiring a Lead, GRC & Security Governance to build and run the governance systems that keep Dave’s technology organization controlled, resilient, and audit-ready. This is a senior individual contributor role with meaningful ownership across technology risk, controls, assurance, incident governance, and business continuity.

Requirements

• 8+ years of relevant technology experience, including significant ownership in security governance, technology risk, or security assurance.
• You’ve personally led a SOC 2 Type II, ISO 27001, or equivalent audit through a successful result—not simply supported audit preparation.
• You’ve built or materially rebuilt a governance, risk, or assurance operating model rather than only administering an established program.
• Strong technical fluency across environments such as cloud, identity, CI/CD, source control, endpoints, networks, and data platforms. You can turn ambiguous expectations into specific, testable controls and challenge answers that aren’t precise enough.
• Experience owning accountability while technical teams own remediation. You can influence Engineering, SRE, Security, IT, and Data partners without taking their work over.
• Sound judgment around risk and materiality, including demonstrated experience escalating meaningful risks when stakeholders disagreed.
• Experience partnering credibly with Internal Audit and Legal in addition to technical and Security teams.
• Strong written communication and program management skills. You turn ambiguity into clear owners, decisions, actions, dates, and evidence.

Nice To Haves

• Experience with SOX ITGC, PCI DSS, NIST-based programs, AI governance or third-party AI risk, and GRC automation platforms such as Vanta or Drata.

Responsibilities

• Build and operate Dave’s technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies.
• Establish and maintain our technology control inventory, with clear owners, evidence requirements, operating cadence, exceptions, and escalation paths.
• Own technology assurance and audit readiness across programs including SOX ITGC, PCI, SOC 2, and other applicable frameworks. Coordinate evidence, support testing, identify gaps, and drive remediation accountability through closure.
• Own the technology and cyber risk register and control exception process. Surface material or sustained risks with clear context and recommendations, including when there’s resistance to escalation.
• Govern change management, incident management, and business continuity so expectations are practical, consistently followed, tested, and improved over time.
• Use AI and automation thoughtfully to improve evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking while maintaining appropriate human review and data safeguards.

Benefits

• Opportunity to tackle tough challenges, learn and grow from fellow top talent, and help millions of people reach their personal financial goals
• Flexible hours and virtual-first work culture with a home office stipend
• Premium Medical, Dental, and Vision Insurance plans
• Generous paid parental and caregiver leave
• 401(k) savings plan with matching contributions
• Financial advisor and financial wellness support
• Flexible PTO and generous company holidays, including Juneteenth and Winter Break
• All-company in-person events once or twice a year and virtual events throughout to connect with your team members and leadership team

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed