Head of Security GRC

About the role

DriveWealth is seeking a senior leader to own and evolve its Governance, Risk and Compliance (GRC) security program. Reporting to the CISO, the Head of Security GRC will ensure the broker‑dealer meets SEC, FINRA and global data‑protection obligations while reducing enterprise risk.

Key responsibilities

• Design, implement and maintain a comprehensive GRC framework aligned with SEC/FINRA, NIST, ISO 27001 and SOC 2 standards.
• Develop and report security metrics to executives and the board, translating technical risk into business decisions.
• Lead cyber threat‑intelligence collection and incident‑response readiness across the organization.
• Conduct third‑party and client cyber due‑diligence, managing vendor risk.
• Serve as the primary liaison with regulators, auditors and enterprise partners.

Required profile

• Proven hands‑on experience leading security GRC in a regulated financial‑services environment.
• Strong autonomy, ability to drive initiatives to completion with minimal supervision.
• Excellent communication skills for interacting with senior leadership, boards, regulators and auditors.

Required skills

• NIST Cybersecurity Framework
• ISO 27001
• SOC 2 compliance
• Threat‑intelligence platforms
• Incident‑response planning
• Third‑party risk assessment

What we offer

• Opportunity to shape security strategy at a fast‑growing global fintech.
• Collaborative culture blending startup agility with Wall Street discipline.
• Competitive compensation and benefits package.