Head of Security, GRC

DriveWealth

Head of Security GRC at DriveWealth leading governance, risk, and compliance strategies in financial services. Collaborating with regulators, managing security metrics, and ensuring data protection compliance.

Posted 7/21/2026full-timeAustin • California, Colorado, Florida, Texas, Washington • 🇺🇸 United StatesLead💰 $270,000 - $290,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in leading governance, risk, and compliance programs within regulated financial services, ensuring alignment with SEC/FINRA regulations and global data-protection laws. Proven ability to manage security audits, incident response planning, and vendor risk management while effectively communicating with stakeholders.

Highest-signal resume keywords

Governance, Risk, And Compliance (GRC)SEC/FINRA RegulationsGlobal Data-Protection LawsIncident Response PlanningThird-Party Risk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityRisk ManagementCybersecuritySecurity AuditsSecurity MetricsThreat IntelligenceKPI/KRI DevelopmentSOC 1 ComplianceSOC 2 ComplianceISO 27001 Compliance

Soft Skills

Excellent CommunicationLeadership Skills

Industry Keywords

Financial ServicesRegulated EnvironmentData-Protection LawsCyber Threat IntelligenceVendor Risk Management

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the organization's governance, risk, and compliance program
Ensure alignment with SEC/FINRA obligations and global data-protection laws
Own security metrics and executive/board reporting
Establish and run cyber threat intelligence capabilities
Manage internal and external security audits and examinations
Own and maintain the Incident Response Plan (IRP)
Oversee vendor risk management processes
Engage with internal business units, regulators, and external partners on security matters
Act as subject-matter expert for security compliance

Requirements

What you’ll need

15+ years of experience in information security, risk management, or cybersecurity roles in a regulated financial-services environment
Strong understanding of SEC/FINRA regulations applicable to broker-dealers
Expertise in global data-protection laws (GDPR, CCPA/CPRA, LGPD)
Hands-on experience leading GRC programs and risk-management initiatives
Ownership of SOC 1, SOC 2, and ISO 27001 examinations and compliance audits
Experience building security KPIs/KRIs and executive or board-level reporting
Knowledge of threat intelligence, incident-response planning, and runbook development
Proven third-party risk management and client/partner security due-diligence
Excellent communication and leadership skills

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Disability insurance
Paid Parental Leave
Wellness reimbursement
Company-provided phone
Personal development allowance
Generous Paid Time Off (PTO)
Observed holidays