Director of Governance, Risk, and Compliance

Department: Corporate

Employment Type: Permanent - Full Time

Location: Remote, US

Reporting To: Bob Fleu

Description

Finvi is looking for a Director of Governance, Risk, and Compliance
This position will be remote.

The Role

The Director of GRC will manage the company's risk mitigation and audit compliance strategies. This role requires strong accounting and controls auditing background, capable of integrating risk management practices, internal audits, and regulatory requirements into the company’s operations. You will collaborate cross-functionally to assess, mitigate, and monitor risks while ensuring robust governance and compliance with relevant laws, standards, and frameworks. This position will audit, innovate, and certify processes while leveraging best-in-class practices, standards, methodologies, and models to improve the company’s overall operations, business performance, and strategic position. You will have the flexibility to operate tactically and strategically. You will have responsibility for day-to-day operations of these functions under the supervision of the General Counsel.  Additionally, you will be the primary point of contact with the company’s outside auditing firms and have responsibility for managing these vendor relationships. This is an entrepreneurial opportunity to assist in the design and building of complex GRC frameworks in an emerging PE backed tech company

Visa sponsorship or transfer of an existing visa is not available for this position. You must be authorized to work directly for any employer in the United States without visa sponsorship or transfer.

What You'll Do

Key Responsibilities:

• Governance & Compliance:
  • Lead the development, implementation, and maintenance of the GRC framework across the organization 
  • Ensure compliance with applicable regulations and industry standards (e.g., PCI, SOC 2, ISO 27701, GDPR, HIPAA, state privacy laws and regulations) 
  • Collaborate with key departments (Legal, Operations, Finance, IT, HR) to establish and enforce governance policies and procedures 
  • Serve as the point of contact for external auditors, regulatory bodies, and certification bodies 
• Risk Management:
  • Identify, evaluate, and prioritize organizational risks (financial, operational, security, compliance) and develop risk mitigation strategies 
  • Lead the risk assessment process, including conducting periodic risk reviews, vulnerability assessments, and control testing
  • Develop and track key risk indicators (KRIs) to monitor ongoing risk exposure and ensure proactive management of risks
• Internal Audits & Controls:
  • Leverage your accounting and auditing expertise to manage internal audits and financial control processes 
  • Ensure that reporting, operational processes, and SaaS product development follow proper compliance and governance guideline 
  • Perform regular audits of internal controls to ensure compliance with SOX and other financial regulations, making recommendations for improvements as necessary 
• Compliance & Regulatory Reporting:
  • Prepare reports for the board of directors, executive management, stakeholders, and regulators on GRC initiatives, audits, compliance status, and risk mitigation effort
  • Monitor changes in regulations and standards, ensuring the company adapts its processes and controls in a timely manner to remain compliant
  •  Lead or support the preparation of regulatory filings, reports, and certifications as needed 
• Policy & Training Development:
  • Develop and implement comprehensive GRC policies and training programs to ensure company-wide understanding and adherence
  •  Educate employees on compliance requirements, ethical practices, and risk management procedures
• Continuous Improvement & Reporting:
  • Continuously evaluate and enhance the effectiveness of governance, risk, and compliance processes and systems 
  • Report on the effectiveness of GRC activities and provide recommendations to senior leadership for continuous improvement
  • Manage and track remediation efforts in response to audit findings or non-compliance issues

What You'll Need

• 3+ years of experience in governance, risk, and compliance management, with a background in accounting and auditing. Certified Public Accounting qualification strongly preferred and prior accounting firm experience s