Job details

Staff Security GRC Lead

Credit Karma is seeking a skilled and experienced Staff Security GRC (Governance, Risk and Compliance) Lead to play a crucial role in identifying key security initiatives and supporting the Director of Security GRC in strategy development. The ideal candidate will have a passion for continuous improvement and a track record of successfully leading GRC initiatives.

Skills

8+ years of experience in cybersecurity, risk management, or GRC roles
Proficient in information security principles, risk management frameworks, compliance regulations, and industry best practices
Experience in leading enterprise-level GRC programs and managing multiple projects simultaneously

Responsibilities

Lead and manage enterprise-level GRC projects from initiation to completion
Proactively identify gaps or improvement opportunities in existing GRC processes
Provide technical guidance and oversight on security risks across the third-party ecosystem
Conduct security audits, assessments, and gap analyses