Founding Security Operations & GRC Lead<\/p>\n
A newly established fintech and trust bank focused on digital payments and digital asset infrastructure.<\/p>\n
<\/p>\n
Confidential Search<\/p>\n
\u00a0Location: Remote, U.S.-Based<\/p>\n
\u00a0Employment Type: Full-Time<\/p>\n
\u00a0Compensation: $140,000\u2013$190,000 Base Salary (Depending on Experience)<\/p>\n
<\/p>\n
<\/p>\n
Position Overview<\/p>\n
<\/p>\n
The Founding Security Operations & GRC Lead will serve as the internal owner of security operations execution and governance activities across cloud infrastructure, enterprise technology, product platforms, and third-party vendors.<\/p>\n
<\/p>\n
The organization leverages specialized security, infrastructure, compliance, and advisory partners for implementation and monitoring activities; however, internal ownership of security findings, remediation tracking, risk management, control evidence, and examination readiness remains critical.<\/p>\n
<\/p>\n
This role is ideal for someone with experience in security operations, cloud security, security governance, technology risk management, audit support, or security compliance within regulated industries.<\/p>\n
<\/p>\n
Key Responsibilities<\/strong><\/p>\n Security Operations<\/p>\n Manage day-to-day security operations across cloud, product, vendor, and enterprise technology environments.<\/p>\n Monitor and coordinate remediation of security findings from security tools, cloud monitoring services, and third-party assessments.<\/p>\n Review, triage, prioritize, track, and escalate security alerts and security-related issues.<\/p>\n Coordinate security incident response activities, including investigation support, escalation, evidence preservation, communications, and post-incident review.<\/p>\n Cloud Security<\/p>\n Support cloud-security posture management within AWS environments.<\/p>\n Oversee security controls related to:<\/u><\/p>\n IAM<\/p>\n CloudTrail<\/p>\n AWS Config<\/p>\n Security Hub<\/p>\n GuardDuty<\/p>\n Inspector<\/p>\n Macie<\/p>\n KMS<\/p>\n Secrets Manager<\/p>\n WAF<\/p>\n Backup and recovery controls<\/p>\n Maintain cloud-security documentation and evidence for audits and examinations.<\/p>\n Governance, Risk & Compliance (GRC)<\/p>\n Maintain security control documentation, audit evidence, risk registers, and security exception records.<\/p>\n Support access governance activities, including user access reviews, privileged access certifications, and joiner\/mover\/leaver processes.<\/p>\n Prepare and organize security evidence for internal audits, external audits, regulatory examinations, and third-party reviews.<\/p>\n Assist with ongoing compliance and examination-readiness initiatives.<\/p>\n Vendor Risk & Oversight<\/p>\n Coordinate security oversight activities involving critical third-party providers and security partners.<\/p>\n Review vendor security documentation, assessment results, penetration-test reports, and remediation plans.<\/p>\n Track vendor-related security issues and follow up on corrective actions.<\/p>\n Secure Development & Vulnerability Management<\/p>\n Partner with engineering and platform teams to support secure SDLC controls.<\/p>\n Coordinate remediation activities for findings from:<\/u><\/p>\n Vulnerability assessments<\/p>\n Penetration tests<\/p>\n Code reviews<\/p>\n SAST tools<\/p>\n Dependency scans<\/p>\n Secrets scanning<\/p>\n Container security reviews<\/p>\n Track remediation progress and ensure timely closure of identified risks.<\/p>\n Regulatory & Examination Readiness<\/p>\n Maintain organized, accurate, and examination-ready security evidence.<\/p>\n Support regulatory readiness activities and ensure security controls remain properly documented and defensible.<\/p>\n Provide regular updates to leadership regarding security risks, incidents, remediation efforts, and control effectiveness.<\/p>\n Qualifications<\/p>\n Required<\/strong><\/p>\n 7+ years of experience in one or more of the following areas:<\/u><\/p>\n Security Operations<\/p>\n Cloud Security<\/p>\n Information Security<\/p>\n Technology Risk<\/p>\n Incident Response<\/p>\n Vulnerability Management<\/p>\n GRC \/ Security Compliance<\/p>\n Experience supporting security programs in regulated or audit-sensitive environments.<\/p>\n Strong understanding of:<\/u><\/p>\n Incident response<\/p>\n Alert triage<\/p>\n Access reviews<\/p>\n Vulnerability management<\/p>\n Risk remediation<\/p>\n Security control documentation<\/p>\n Hands-on experience with AWS security services and cloud-security operations.<\/p>\n Experience working with SIEM, MDR, EDR, vulnerability management, identity management, and ticketing platforms.<\/p>\n Ability to coordinate effectively across technical teams, business stakeholders, and external partners.<\/p>\n Strong documentation, communication, and organizational skills.<\/p>\n Preferred<\/p>\n Experience within:<\/u><\/p>\n Banking<\/p>\n Fintech<\/p>\n Payments<\/p>\n Trust companies<\/p>\n Financial services<\/p>\n Digital asset or custody environments<\/p>\n Familiarity with:<\/p>\n OCC examination readiness<\/p>\n FFIEC guidance<\/p>\n NIST CSF<\/p>\n NIST 800-53<\/p>\n SOC 2<\/p>\n GLBA<\/p>\n CIS Controls<\/p>\n Experience supporting AWS multi-account cloud environments.<\/p>\n Exposure to digital assets, blockchain, stablecoins, wallets, custody platforms, or regulated payment systems.<\/p>\n Experience supporting Microsoft 365, endpoint security, identity governance, EDR, or SASE technologies.<\/p>\n Professional certifications such as:<\/p>\n CISSP<\/p>\n CISM<\/p>\n CISA<\/p>\n CCSP<\/p>\n AWS Security Specialty<\/p>\n GIAC<\/p>\n Security+<\/p>\n <\/p>\n What Makes This Opportunity Unique<\/strong><\/p>\n Founding-level security leadership role with significant visibility and impact<\/p>\n Opportunity to help build security operations and governance programs from the ground up<\/p>\n Direct interaction with executive leadership, including CTO\/CISO<\/p>\n Exposure to regulatory, cloud-security, vendor-risk, and audit-readiness initiatives<\/p>\n Collaborative environment supported by specialized security and compliance partners<\/p>\n Remote work flexibility within the United States<\/p>\n <\/p>\n Interested candidates should possess a hands-on approach, strong ownership mentality, and the ability to thrive in a fast-paced, high-growth environment where security, compliance, and operational excellence are critical to success.<\/p>\n <\/p>\n