Security Governance Risk and Compliance (GRC) Lead, Gusto
$144-210k
1-2 days a week in office
Automated payroll, benefits & HR platform
Job no longer available
Automated payroll, benefits & HR platform
1001+ employees
Job no longer available
$144-210k
1-2 days a week in office
1001+ employees
Company mission
To grow the small business economy.
Role
Who you are
- 8+ years of experience in the GRC, audit, compliance space assisting an organization in working towards SOX, SOC 1, SOC 2, ISO 27001, PCI and HIPAA
- Experience with ISO 27001, ISO 27002, NIST CSF and working knowledge of ISO 27005 and ISO 27018
- Client-facing experience managing pre and post sales for IT & Security support
- Relevant certifications (e.g., CISA, CISSP, CRISC, CISM) preferred
- Excellent analytical, problem-solving, and project management skills
- Ability to work collaboratively with cross-functional teams and stakeholders, from control owners up to the executive level
- High attention to detail and a commitment to upholding the highest standards of data security and compliance
- Experience with response coordination tools like Loopio, RFPio, etc
What the job involves
- Develop, implement, and maintain a comprehensive strategy and supporting documentation that aligns with the business goals and objectives to help support all pre and post sales IT & Security support for Gusto embedded payroll
- Support pre-sales initiatives with large potential customers by aligning with the internal Sales team on who Gusto is targeting in order to perform initial compatibility due diligence, including reputational checks, public breach history, etc
- Support the continued refinement of tier-based security requirements, inclusive of internal service level objectives (SLOs)
- Aligning to a chosen security framework with explicit guidelines for each type of partner Gusto would work with
- Creation of playbooks, driving agility and efficiency, improving Gusto’s embedded payroll service, including current controls and positioning IT & Security as a competitive advantage in our go-to-market strategy
- Develop project plans to capture key milestones, sign off and support throughout the pre (and post) sales process
- Understand, triage and respond to all partner due diligence requirements in a centralized, organized, and timely manner. For areas with identified gaps, coordinate internal discussions for a path to remediation
- Facilitate negotiations with partners to ensure there is risk reduction for both parties, including ensuring any commitments from Gusto are specific, time-bound and achievable prior to insertion in a contract
- Ensure there is continued trust with our Embedded Partners by ensuring proactive communication of external security and IT exam or scan results and management of on-going Security or IT requirements inclusive of annual audits, attestations and other due diligence exercises
- Continuously monitor changes in compliance regulations, standards, and best practices, and adapt the company's GRC program accordingly
- Lead efforts to drive process improvement and enhance the effectiveness of the GRC function
Our take
For many small businesses, vital administrative tasks such as payroll, taxes, and benefits are manual tasks that take time and energy which many SMB owners don’t have. The three co-founders of Gusto – all coming from small business backgrounds – collaborated on a Fintech company that would handle employee payments, benefits administration, and compliance support specifically for small businesses.
The company may have started slowly, as the founders focused on nailing each individual aspect of Gusto’s operations, but has now skyrocketed to unicorn status with more than 400,000 customers and a multi-billion dollar valuation. And in 2021, Gusto began acquiring other companies to strengthen its offering and its position in a competitive market, including two other fintech startups, Ardius and Symmetry.
Through its continued acquisitions and fundraising efforts, the company has carved out a strong position for itself in the space. Although Gusto has found itself impacted by the macroeconomic situation, through the significant effect it has had on its clientele, the company still appears positive for the future after raising funds in 2023 that has seen it reach key profitability benchmarks. It continues to expand its platform, most recently partnering with Parafin to launch a payroll line of credit for small businesses. With a growing suite of services and a clear focus on supporting small businesses through changing economic conditions, Gusto looks set to sustain its momentum and further strengthen its position in the HR and payroll technology market.
Steph
Company Specialist at Welcome to the Jungle
Insights
45% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
May 2022
$55m
SERIES E
Aug 2021
$175m
SERIES E
Total funding: $706.3m
Company benefits
- Health and Wellbeing: Medical, dental, and vision insurance for employees and dependents. Family care and support, including family planning and fertility benefits. Gender-affirming care and support. A variety of mental health resources.
- Time Away: It's important to take time away for yourself or to take care of your family. Gusto offers paid vacation, sick time, bereavement, and holidays, paid leaves, sabbatical, and more!
- Free meals and refreshments: If you work at one of our offices, enjoy food, drinks, and snacks— on us. Conversation and community is an added bonus!
- Perks:
Company HQ
Central Waterfront, San Francisco, CA
Leadership
Joshua Reeves
(Co-Founder & CEO)Studied Electrical Engineering at Stanford and went onto co-found Gusto in 2011.
Tomer London
(Co-Founder & CPO)Has a PhD in Electrical Engineering from Stanford. Was a Researcher at Intel, and then interned at Bump Technologies. Co-founded Vizmo, a mobile self-service technologies company, in 2008. Co-founded Gusto in 2011.
Edward Kim
(Co-Founder & Head of Engineering)Studied Electrical Engineering at Stanford. Was Senior Project Engineer at Volkswagen of America Electronics Research Lab and then co-founded Picwing, a printed photos company, in 2008. Co-founded Gusto in 2011.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 50 more jobs at Gusto