Senior Director of Governance, Risk and Compliance

📋 Description

• Set strategic GRC vision and multi-year roadmap to scale with Ripple's growth.
• Pioneer AI/automation across GRC for monitoring, evidence, and risk assessments.
• Lead and grow a team of GRC Program Managers and Engineers.
• Design and operate an integrated GRC program across ERM, Compliance, BCDR, Internal Audit.
• Own regulatory compliance posture across NYDFS, MAS, DFSA, GDPR, and NIST.
• Drive and maintain SOC 2 Type II and ISO 27001; support ITGC for SOX/SOC1.

🎯 Requirements

• 15+ years in information security GRC; 5+ years in senior leadership (FinTech preferred).
• Deep expertise in NYDFS, MAS, DFSA, GDPR, SOC 2, ISO 27001, NIST CSF; crypto compliance a plus.
• Proven success building and scaling GRC programs in high-growth or M&A; acquisitions integration.
• Cross-functional leadership across InfoSec, ERM, Compliance, BCDR, Internal Audit; data-driven.
• Automated, self-service evidence collection and audit readiness to reduce engineering drag.
• Experience operating Third-Party Risk Management at scale; vendor security assessments.
• GRC platforms and tooling strategy; executive-level risk communication.

🎁 Benefits

• Competitive salary, bonuses, and equity.
• Comprehensive health, retirement, family forming, and support benefits.
• Employee giving match.
• Mobile phone stipend.
• R&R days and wellness reimbursement with weekly onsite/virtual programming.
• Generous vacation policy and parental leave.