Senior Manager, Security GRC & Trust

Greenlight is the leading family fintech company on a mission to help parents raise financially smart kids. We proudly serve more than 6 million parents and kids with our award-winning banking app for families. With Greenlight, parents can automate allowance, manage chores, set flexible spend controls, and invest for their family’s future. Kids and teens learn to earn, save, spend wisely, and invest. 
At Greenlight, we believe every child should have the opportunity to become financially healthy and happy. It’s no small task, and that’s why we leap out of bed every morning to come to work. Because creating a better, brighter future for the next generation depends on it.
Greenlight is seeking a highly motivated and experienced Senior Manager, Security GRC & Trust, to play a pivotal role in shaping and leading our Security Governance, Risk, Compliance & Trust program. This critical position offers the opportunity to make a significant and lasting impact on Greenlight's cybersecurity program.
This role will report to the Senior Director, Security GRC & Trust.

Your day-to-day:

• Develop, implement, and oversee a comprehensive Security GRC & Trust program aligned with industry best practices and regulatory requirements (e.g., SOC 1, SOC 2, ISO, PCI, NIST CSF, IT SOX)
• Lead efforts to develop, implement and maintain Greenlight’s IT SOX program, ensuring alignment with regulatory requirements and industry standards.
• Develop, design, and oversee the implementation of IT General Controls (ITGCs) and IT Application Controls (ITACs) of the IT SOX program
• Develop and maintain documentation relevant to the IT SOX Program, including IT Risk Control Matrix (RCM), process narratives, flowcharts, and more.
• Oversee design and effectiveness of testing of ITGC and ITACs
• Develop and maintain close working relationships with the management teams, Finance/Accounting teams, internal audit team and subject matter experts of all major functional areas as well as the external auditor
• Manage and conduct internal security assessments with industry best practices/frameworks (i.e. NIST CSF, NIST 800-53, CIS, etc.) to identify, prioritize, and mitigate vulnerabilities and process improvement opportunities across Greenlight's systems and infrastructure.
• Continuously monitor the security landscape, staying abreast of evolving threats and regulations, and recommending proactive measures to enhance Greenlight's security posture
• Champion security awareness by developing and delivering engaging training programs, including phishing simulations, to educate employees on best practices and security threats
• Foster a culture of trust and accountability by collaborating with internal stakeholders (Engineering, Security Operations, IT, Legal, etc) to ensure alignment and effectiveness of the Security GRC & Trust program

What you’ll bring to the team:

• Must be a team player 
• 7+ years of information security, security governance, risk management, and compliance
• In-depth knowledge of industry best practices and security frameworks (e.g. IT SOX, NIST CSF, SOC 2, SOC 1, PCI DSS, etc)
• Strong understanding of relevant privacy security regulations (e.g., GDPR, CCPA, etc.)
• IT internal audit & external audit experience
• Knowledge of AWS, CI/CD process and common Security tooling stack for enterprise technology companies
• Excellent communication, collaboration, and influencing skills
• Ability to manage multiple priorities and deadlines in a fast-paced environment.
• Strong analytical and problem-solving skills

Not sure this one’s for you? Don’t count yourself out. Show us what you’ve got and we’ll reach out if there’s a great fit.

Work perks at Greenlight:

• Medical, dental, vision, and HSA match 
• Paid life insurance, AD&D, and disability benefits 
• Traditional 401k with company match and Roth IRA
• Unlimited PTO 
• Paid company holidays and pop-up bonus holidays 
• Wellness & professional development stipends
• Mental health resources  
• 1:1 financial planners
• Fertility healthcare
• 100% paid parental and caregiving leave, plus cleaning service and meals during your leave
• Flexible WFH, both remote and in-office opportunities
• Fully stocked kitchen, catered lunches, and occasional in-office happy hours
• Employee resource groups

Our stance on salaries:Greenlight provides a competitive compensation package with a market-based approach to pay and will vary depending on your location, experience and skill set. The total compensation package for this position will also include a discretionary performance bonus, equity rewards, medical benefits, 401K match, and more. Greenlight conducts continuous compensation evaluations across d