Director Infosec Governance Risk and Compliance

Through our blockchain technology and rapidly growing network of financial institutions, Ripple is improving the global financial system and increasing economic inclusion for more people, in more places around the world.  Ripple is looking for a passionate Information Security leader to build a world class Information Security program.  As a leader on the Information Security team, you will help us achieve this mission by actively working to protect our staff, company, and the larger crypto communities we engage with.  

In this role, you will build and lead a team of GRC professionals to deliver exceptional security solutions and processes.  You will collaborate across the business with other leaders in Engineering, Product, IT, Legal, and Compliance to ensure Ripple maintains a world class security posture.  This role reports directly to the Head of Information Security.

WHAT YOU’LL DO:

• Lead organizational efforts to accomplish SOC2 Type II, ISO 27001 and other certifications and attestations to demonstrate cybersecurity assurance internally and to our customers
• Scale our GRC organization to meet financial services requirements on a global scal
• Co-create and help articulate Information Security strategy across the company
• Support the development and maintenance of cybersecurity policies, standards, and guidelines in alignment with applicable laws, common security frameworks and best practices
• Drive the closure of gaps and control improvements with internal teams
• Lead automated evidence collection efforts to ensure our controls are durable and consistent
• Track, remediate and report on risks and guide risk reduction through the GRC system
• Develop consistent processes for identifying potential risk events, quantifying and documenting the probability of occurrence and impact on the business

WHAT WE’RE LOOKING FOR:

• Experience with building GRC programs at high growth companies
• 8+ years of experience in the field of Cybersecurity, Cyber Risk and GRC
• Co-create and help articulate Information Security strategy across the company
• A track record of hiring talented cybersecurity professionals
• Proficiency with common information security frameworks including SOC2, NIST CSF, and ISO 27001
• Ideal candidate has experience acquiring MTL’s on a national and international level 
• Inclusive leadership and teamwork skills
• Results oriented, values collaboration, self-motivated
• Someone willing to adapt to change in a fast moving environment

WHAT WE OFFER:

• The chance to work in a fast-paced start-up environment with experienced industry leaders
• A learning environment where you can dive deep into the latest technologies and make an impact
• Competitive salary and equity
• 100% paid medical and dental and 95% paid vision insurance for employees starting on your first day
• 401k (with match), commuter benefits
• Industry-leading parental leave policies
• Generous wellness reimbursement and weekly onsite programs
• Flexible vacation policy - work with your manager to take time off when you need it
• Employee giving match
• Modern office in San Francisco’s Financial District
• Fully-stocked kitchen with organic snacks, beverages, and coffee drinks
• Weekly company meeting - ask me anything style discussion with our Leadership Team
• Team outings to sports games, happy hours, game nights and more!

WHO WE ARE:

Ripple is doing for value what the internet did for information: enabling its instant and seamless flow around the world. We call this the Internet of Value (IoV). Using blockchain and cryptocurrency technology, Ripple is dedicated to creating powerful gains in financial efficiency, equity and inclusion. In addition, Ripple is developing and enabling the future use cases that will catalyze the new digital economy for governments, businesses and consumers.

Ripple has offices in San Francisco (HQ), New York, London, Mumbai, Singapore, São Paulo, Reykjavík, Washington D.C. and Dubai.