Security GRC Lead, Gemini

• This leadership role requires strong project management skills, executive-level communication abilities
• The ideal candidate will have a proven track record in regulatory compliance enforcement, security process development, policy creation, and security framework navigation
• Experience with a Big 4 firm is highly desirable, but equivalent experience in leading security compliance teams in financial services, technology firms, or regulated industries will also be considered
• Bachelor’s degree and equivalent practical experience in cybersecurity compliance risk management
• Minimum of 8 years of experience in cybersecurity compliance with a focus on regulatory frameworks
• Proven expertise in managing NYDFS, PCI, ISO 27001, and SOC II compliance
• Exceptional project management skills, with the ability to prioritize and balance multiple initiatives effectively
• Strong analytical, problem-solving, and communication skills, capable of interfacing with senior executives

Desirable

• Gemini is seeking a Security GRC Lead to manage and be accountable for the organization’s security compliance programs, including PCI, ISO 27001, NYDFS, and SOC II reports
• The role demands deep expertise in security compliance frameworks, audit preparedness, and regulatory reporting, ensuring the organization adheres to all necessary cybersecurity compliance standards
• The Security GRC Lead will work closely with internal stakeholders to establish, implement, and maintain best-in-class compliance programs that meet evolving industry regulations
• This is a full-time position, requiring the ability to influence, drive strategy, and provide mentorship within the security governance space
• Ownership & Accountability: Lead, manage, and be accountable for PCI, ISO 27001, NYDFS, and SOC II compliance programs
• Audit Planning & Execution: Develop and oversee project plans for internal and external audits, ensuring timely execution and alignment with compliance requirements
• Operational Excellence: Drive continuous improvement in security compliance operations by implementing efficient and scalable processes
• Regulatory & Audit Coordination: Oversee security audits, and regulatory compliance initiatives
• Automation & Efficiency: In partnership with technology teams, assist in streamlining evidence collection, automate security enforcement, and optimize compliance workflows
• Leadership & Team Development: Mentor and guide a team, fostering a strong risk management culture and ensuring best practices
• Executive Communication: Present compliance status, risk assessments, and mitigation strategies to senior leadership
• Cross-functional Collaboration: Align compliance goals with business objectives and coordinate efforts across multiple teams