Security GRC Analyst Program Manager

What you'll do

• Identify and mitigate the company's most critical security risks quickly and pragmatically.
• Design and scale security governance, risk, and compliance programs from the ground up.
• Implement and adapt established security controls and processes for the specific needs of the platform.
• Enforce engineering best practices regarding secure development and infrastructure.
• Ensure the company meets compliance and audit requirements as it expands into regulated markets.
• Translate complex policy and regulatory mandates into actionable operational and engineering controls.
• Execute long-term solutions by evaluating control environments and uncovering underlying risks.
• Manage security programs by creating roadmaps, setting milestones, and driving remediation projects to completion.

What we're looking for

• 8+ years of experience in Security GRC, ideally in fast-paced startup environments building programs from the ground up.
• Proficiency with NIST CSF, OCC's Cybersecurity Supervision Work Program, FFIEC IT Examination Handbook, or similar global frameworks.
• Proven experience managing regulatory audits from global auditors across security domains.
• Demonstrated ability to convert complex policy and regulatory mandates into actionable operational and engineering controls.
• Broad technical depth in cloud architecture, identity management, appsec, data protection, and incident response operations.
• Strong program execution skills including crafting roadmaps, setting milestones, and driving remediation projects.
• Experience building or scaling security programs through execution at a startup or in an embedded role (preferred).
• Interest in the potential of crypto and stablecoins to power global financial infrastructure (preferred).