Director, Governance, Risk & Compliance
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director of Cybersecurity Governance, Risk and Compliance at Marqeta leading strategic cybersecurity initiatives. Responsible for establishing policies, risk management programs, and compliance frameworks.
Responsibilities:
- Develop, implement, and maintain cybersecurity policies, standards, and control frameworks aligned with industry regulations and business objectives
- Establish and operate cybersecurity governance models, steering committees, and approval processes
- Maintain unified control inventory and oversee validation activities with internal and external assessors
- Design and execute comprehensive cybersecurity risk assessment frameworks and methodologies
- Manage risk treatment plans, remediation tracking, and escalation processes in alignment with enterprise risk management
- Provide risk advisory services and integrate findings into strategic cybersecurity planning
- Lead compliance readiness assessments and coordinate audit activities across multiple frameworks (PCI DSS, SOC 2, ISO 27001, etc.)
- Manage audit findings remediation and maintain compliance reporting for internal and external stakeholders
- Support legal and contract negotiations regarding cybersecurity requirements
- Oversee third-party cybersecurity risk assessments and vendor management processes
- Lead customer due diligence, security questionnaire responses, and Trust Center operations
- Support sales enablement through security documentation and customer audit facilitation
Requirements:
- Proven experience (6+ years) in a security leadership role with deep expertise in cybersecurity governance, risk management, and compliance
- Proven experience with regulatory frameworks (PCI DSS, SOC 2, ISO 27001, NIST, SOX)
- Experience in financial services, fintech, or highly regulated industries
- Demonstrated success in audit management and customer-facing security assessments
- Strong analytical and problem-solving capabilities with attention to detail
- Excellent written and verbal communication skills for technical and executive audiences
- Experience with GRC tools (OneTrust, ServiceNow, or similar platforms)
- Strong business acumen and ability to align security initiatives with business objectives
- Track record of cultivating relationships across teams, influencing decision making, and collaborating with stakeholders at all levels of the organization
- Proven ability to develop structure, advance execution, and measure performance within various and complex projects, teams, and environment
- Proactive and strategic mindset, with the ability to anticipate business needs of the cybersecurity organization and stakeholders
- A strong bias toward action and ability to operate proactively and effectively in a dynamic, fast-paced environment
- High ethical standards and a commitment to promoting a strong security culture
- One or more industry certifications: CISM, CRISC, CISSP, ISO 27001 Lead Auditor, or equivalent
Benefits:
- Multiple health insurance options
- Flexible time off – take what you need
- Retirement savings program with company contribution and after tax contributions
- Equity in a publicly-traded company and an Employee Stock Purchase Program
- Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave
- Free therapy sessions, financial and professional coaching, and legal advice
- Monthly stipend to support our remote work model
- Annual “development dollars” to support our people growth and development
- Through Flex First, the freedom to live and work wherever you and your family thrive
Similar Jobs
Manager, Compliance Monitoring and Analytics
Manager responsible for executing compliance monitoring program focusing on live and desktop activities. Ensuring adherence to healthcare compliance laws and company policies.
Claims Compliance Manager
Compliance Manager responsible for regulatory compliance in health care claims. Ensuring accurate reporting and client advisement in a remote role.
Director – Energy Regulatory Policy
Director of Regulatory Policy with a focus on state-level engagement and policy strategies for clean energy advocacy. Collaborating with team and partners to expand advanced energy markets across key U.S. states.
Regulatory Affairs Specialist
Regulatory Affairs Specialist providing regulatory expertise throughout the product lifecycle at Harrison.ai. Helping solve compliance challenges for Software-as-Medical-Device products.
Regulatory Affairs Specialist
Regulatory Affairs Specialist responsible for compliance with global regulations in AI healthcare products. Collaborating with a team to drive innovation in medical device technology.
Advertising Compliance Manager
Advertising Compliance Manager overseeing regulatory review of marketing content for wellness products. Ensuring compliance with FTC standards and collaboration with creative teams.
Regulatory Compliance Manager
Regulatory Compliance Manager leading a dispersed team at Northrop Grumman on pricing and cost accounting compliance. Managing audits and regulatory submissions within a remote framework.
Director of Governance, Risk and Compliance (GRC)
Director of Governance, Risk, and Compliance at Hyperproof, transforming compliance into a revenue-driving function. Leading security and compliance strategy in a high-growth SaaS environment.
Manager, HSE Compliance
HSE Compliance Manager ensuring CHEP's Americas operations meet health, safety, and environmental standards. Leading compliance efforts across multiple sites in North America, Mexico, and Brazil.
Compliance Officer
Compliance Officer overseeing UK regulatory compliance framework, conducting monitoring and testing for FCA regulated activities. Supporting the firm’s compliance governance and training efforts in the UK market.
Compliance Manager – Product
Compliance Manager at EarnIn leading product and marketing compliance to meet legal requirements. Overseeing compliance programs and enhancing policies within fast-paced fintech environment.
Director, Regulatory Compliance
Director of Regulatory Compliance at Trustly, overseeing compliance in financial services and fintech partnerships. Advising product teams and enhancing regulatory frameworks for innovative payment solutions.
Regulatory Change Analyst
Regulatory Change Analyst role focusing on monitoring federal and state laws relevant to mortgage servicing business. Ensuring compliance and guiding implementation of regulatory changes for ServiceMac.
Corporate Compliance Officer
Corporate Compliance Officer overseeing compliance within Labcorp's North Central division. Responsible for proactive guidance and collaboration in a healthcare context across multiple states.
Environmental Compliance Manager
Environmental Compliance Manager overseeing environmental compliance for long-term operations of renewable energy assets. Ensuring adherence to regulations and collaborating with internal teams on compliance initiatives.
Strategic Manager, Compliance
Strategic Manager, Compliance at Envita Solutions, managing vendor compliance and auditing programs for sustainable waste solutions. Driving efficiency and risk mitigation across audit processes and cross-functional teams.
Compliance Associate
Compliance Associate supporting daily compliance operations for XTRM, a global FinTech payments company. Ensuring customer accounts adhere to financial regulations and assisting with compliance investigations.
Senior GRC Analyst, IT Controls
Senior Analyst at Arco Educação focusing on GRC and risk management in cybersecurity. Leading audits, governance, and improving data security processes in a dynamic education technology environment.
Senior Contracts/Subcontracts Compliance Manager
Contracts/Subcontracts Senior Compliance Manager ensuring compliance with federal labor laws at Amentum. Leading compliance programs, training, and audits across subcontractor operations.
Regulatory Affairs Specialist – Start-up
Regulatory Affairs Specialist at Synvia improving lives through innovative pharmaceutical solutions. Handling regulatory submissions and analyzing drug master files while ensuring compliance with Brazilian regulations.