Governance, Risk, and Compliance Lead, Extend
$189-205k
Plus stock in an early-stage startup growing quickly
Warranty and protection plan services
Job no longer available
Warranty and protection plan services
201-500 employees
Job no longer available
$189-205k
Plus stock in an early-stage startup growing quickly
201-500 employees
Company mission
To revive an industry that's been starved of modernity and change for too long.
Role
Who you are
- 10+ years of experience in information security, risk management, or compliance
- 2+ years in a leadership role managing GRC programs
- Strong knowledge of security frameworks (SOC2, NIST, ISO) and regulatory requirements
- Experience with DFS500 compliance preferred
- Demonstrated ability to develop and implement risk management strategies
- Excellent communication skills - able to translate technical concepts for non-technical audiences
- Experience with compliance automation tools and GRC platforms
- Strong project management and organizational skills
- Ability to work effectively in a fast-paced, remote environment
- Relevant certifications (CISA, CISSP, CRISC, etc.) preferred
What the job involves
- Manage annual SOC2 audit processes and maintain DFS500 compliance
- Coordinate with external auditors and internal stakeholders
- Develop and implement audit preparation procedures
- Track remediation efforts for audit findings
- Compile and update security, privacy, and risk policies
- Ensure policies align with regulatory requirements and industry standards
- Create and maintain standards, procedures, and controls documentation
- Collaborate with cross-functional teams to implement GRC requirements
- Oversee risk assessment and analysis activities
- Develop risk mitigation strategies and track implementation
- Maintain risk register and reporting metrics
- Facilitate business continuity and disaster recovery planning
- Provide GRC guidance and thought leadership to senior management
- Oversee vulnerability management processes
- Lead security awareness and training initiatives
- Support incident response activities when needed
- Generate reports and metrics for executive leadership
Our take
Extend allows online and offline merchants to offer product warranties and protection plans at the point of sale. It aims to provide a comprehensive and centralized warranty system where before there was not one. The company also provides customers themselves with a fast support experience, where 95% of claims are resolved in just 90 seconds.
Its API based platform is integrated into the likes of Shopify, Magento, Salesforce Commerce Cloud and BigCommerce, and can also be integrated into private client-owned e-commerce platforms. This ease of use is what makes Extend so appealing for clients.
On top of this, its seen good funding thats fuelled business growth and geographical expansion. It’s interesting to note that PayPal Ventures and SoftBank are two of their main backers, as this indicates that payment giants see the value of these point of sale transactions. And in 2022, it was named a certified partner of Shopify and reached an important milestone in becoming a full-service company, taking it one step closer to its vision of becoming the "AppleCare for everything".
Steph
Company Specialist at Welcome to the Jungle
Insights
-19% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
May 2021
$260m
SERIES C
Oct 2020
$40m
SERIES B
Total funding: $316.4m
Company HQ
Rincon Hill, San Francisco, CA
Leadership
Woodrow Levin
(Founder & CEO)Woodrow started his career by founding InStadium in 2000, where he spent 7 years before also founding Riverbank Capital and BringIt. After further roles at DocuSign and DraftKings, he founded Extend in February 2019, serving since then as CEO.
Share this job
View 9 more jobs at Extend