Lead GRC & Security Governance
Dave is a financial technology company.
Funding history
About Dave Operating LLC
Dave Operating LLC operates Dave, a consumer-focused financial technology app designed to make banking and cash management more accessible. Its products include ExtraCash, which provides eligible members up to $500 through an overdraft service; Dave Checking, with direct deposit, debit-card spending, early paycheck access, ATM access, and budgeting tools; and Goals accounts for organizing and tracking savings. Dave serves individual consumers, particularly people seeking help managing expenses between paychecks, and provides its services through a mobile application in partnership with FDIC-member banks.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build and run technology governance across cyber and technology risk, IT controls, change management, incident management, business continuity, and policies. You will maintain the control inventory, lead assurance and audit readiness, manage risk registers and control exceptions, and improve governance through automation with appropriate human review.
Requirements
- 8+ years of relevant technology experience with significant ownership in security governance, technology risk, or security assurance
- Experience personally leading a successful SOC 2 Type II, ISO 27001, or equivalent audit
- Experience building or materially rebuilding a governance, risk, or assurance operating model
- Technical fluency in cloud, identity, CI/CD, source control, endpoints, networks, and data platforms
- Experience influencing Engineering, SRE, Security, IT, and Data partners while they own remediation
- Experience escalating material risks and partnering with Internal Audit and Legal
- Strong written communication and program management skills
Responsibilities
- Build and operate the technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies
- Establish and maintain the technology control inventory, including owners, evidence requirements, operating cadence, exceptions, and escalation paths
- Lead technology assurance and audit readiness for SOX ITGC, PCI, SOC 2, and applicable frameworks
- Manage the technology and cyber risk register and control exception process
- Govern change management, incident management, and business continuity practices
- Use AI and automation to improve evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking
Benefits
- Equity
- Flexible hours
- Virtual-first work culture
- Home office stipend
- Medical, dental, and vision insurance
- Paid parental and caregiver leave
- 401(k) plan with matching contributions
- Financial advisor and financial wellness support
- Flexible PTO
- Company holidays
- All-company in-person and virtual events
