About Prove 

As the world moves to a mobile-first economy, businesses need to modernize how they acquire, engage with and enable consumers. Prove’s phone-centric identity tokenization and passive cryptographic authentication solutions reduce friction, enhance security and privacy across all digital channels, and accelerate revenues while reducing operating expenses and fraud losses. Over 1,000 enterprise customers use Prove’s platform to process 20 billion customer requests annually across industries, including banking, lending, healthcare, gaming, crypto, e-commerce, marketplaces, and payments. For the latest updates from Prove, follow us on LinkedIn.

Prove is driving the future of digital identity. We are looking for Provers who know how to make an impact. We’re talking self-starting professionals who thrive in a fast-paced environment, process information quickly, and make intelligent decisions. The work is challenging and requires not only smart but natural curiosity and tenacity. Teamwork is also important to us – we work together and play together.   

Prove has big plans, and we’re excited about the future. If this sounds like the place for you – come join our team! 

Title: Director, Governance, Risk, & Assurance (GRA)

Department: Legal (Compliance) 

Reports To: VP of InfoSec & GRA (Governance, Risk & Assurance) 

FLSA Status: Exempt

Location: US Remote

Job Summary

The Director of Governance, Risk, and Assurance (GRA) is a senior leadership role responsible for helping lead and mature our GRA function. This role will be instrumental in developing, implementing, and overseeing our GRA strategy, ensuring compliance with global regulations, industry standards, and customer requirements. This role will work on complex issues, translate business strategy into functional plans, and interact frequently with senior management and executives to drive business results and ensure operational effectiveness across the organization

Key Responsibilities:

• Help define and execute the long-term GRA strategy and roadmap, aligning it with business objectives, growth, and evolving regulatory landscape. Participates with senior management to establish strategic plans and objectives. Makes final decisions on implementation and ensures operational effectiveness.
• Lead, mentor, and grow a high-performing GRA team, fostering a culture of security, compliance, and continuous improvement across the organization. Directs the activities of a functional area or multiple integrated departments through lower management. Leads team(s) to develop new methods and solve complex matters.
• Serve as the primary GRA point of contact for executive leadership, board members, auditors, and key customers. Interacts with senior management, executives, and/or major customers which frequently involves negotiating matters of significance to the organization.
• Oversee all internal and external audits, efforts. Works on complex issues where problems are not clearly defined and where fundamental principles do not fully apply.
• Manage our enterprise-wide risk management framework, including risk identification, assessment, mitigation, and reporting. Accountable for actions that impact function or multiple department budgets.
• Oversee Knowledge Management, including our Standard Information Gathering (SIG) and Policy Management. Effectively cascades functional strategy and contributes to development of organizational policies.

Qualifications and Experience:

• 10+ years of experience in Governance, Risk, Compliance, Trust, Cyber or Information Security, or Informational Technology
• Deep understanding of SOC 2, PCI DSS, HIPAA, GDPR, ISO 27001
• Proven, hands-on experience integrating GRC tooling with underlying security systems to automate controls and reduce manual efforts.
• Collaborative and pragmatic approach to governance, compliance, and risk management, fostering relationships and encouraging shared ownership of enterprise security goals
• Exceptional communication skills, with the ability to translate complex risk and compliance concepts into clear business terms
• Promote, maintain and enhance our cultural values of humility, passion, inclusion, and leadership.
• Strong passion for learning about our products and markets through in-house and external training.

 

This position description should not be considered the final description of the position. The position description is not intended to be an all-inclusive list of duties and standards