Director of Governance, Risk & Compliance, CoreWeave
$180-220k
Specialized cloud provider
Be an early applicant
Specialized cloud provider
201-500 employees
Be an early applicant
$180-220k
201-500 employees
Company mission
CoreWeave's mission is to deliver a massive scale of GPU compute resources on top of the industry’s fastest and most flexible infrastructure.
Role
Who you are
- Minimum of 10 years work experience in IT, Security Compliance or Audit function, preferably in the cloud service provider industry
- Educational Qualification: Bachelor's in Information Security, Computer Science, or related degree; Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP) Certification or equivalent
- Experience building and maintaining a governance, risk, and compliance program at scale
- Experience conducting end-to-end control framework assessments; documenting control effectiveness, gaps, remediation requirements and/or maturity recommendations
- Ability to drive a team of managers and analysts to focus on prioritizing and delivering high-quality work with external/internal audit, customers and investors with attention to details
- Experience working directly with external auditors, regulators and government officials on security assessments and due diligence
- Ability to assess risks and distinguish critical or high impacting security areas within CoreWeave’s environment and drive appropriate remediations across multiple teams when necessary
- Knowledge and experience of a cloud infrastructure environment and what applicable security controls should be in place
- Drive both technical and non-technical conversations related to security controls with executive leaders and team members across every business team at CoreWeave
- Ability to identify, assess and plan for upcoming regulatory changes, customer requirements and due diligence trends ahead of when they may be required and build a corresponding action plan to address any requirements
- Strong technical background and experience with cyber tooling
- Expert knowledge of regulatory and compliance requirements, such as: SOX, SOC 2, ISO 27001:2022, ISO 27701, NIST 800-53, NIST CSF, PCI DSS, FedRAMP, GDPR, UK Cyber Essentials, HIPAA, etc
- Deep experience on strategy and execution of collaborating with cross-functional teams, including engineering, infrastructure, security, etc
- Excellent knowledge and execution of reporting procedures to executives and board members on the state internal governance, risk and compliance
What the job involves
- We are seeking a highly skilled and driven Director of Governance, Risk, and Compliance to join our Security team
- You will lead a high-functioning GRC team, reporting to the Chief Information Security Officer and focus on the overall strategic direction of GRC
- Additionally, you will act as the external representative for CoreWeave’s privacy, regulatory, risk, and governance programs
- Develop and drive the overall Governance, Risk, and Compliance program strategy in alignment with CoreWeave’s goals
- Own the regulatory and compliance maturity roadmap to support scaling requirements and new business opportunities
- Act as the representative of GRC programs in executive leadership discussions
- Report program KPIs and KRIs to executive leadership
- Advise C-level executives on new and ongoing risks, mitigation strategies, and regulatory compliance requirements
- Oversee budgets for GRC initiatives and ensure program resources are utilized properly
- Build and maintain partnerships with industry resources to stay ahead of evolving compliance trends
- Be the eyes and ears of CoreWeave related to new and upcoming regulatory, compliance, and customer requirement changes that may impact CoreWeave’s business strategies
- Direct the approach for tackling newly scoped regulatory/compliance initiatives aligned to business scaling requirements (i.e., PCI, DORA, NIS2, etc.)
- Drive operational changes and raise awareness to ensure employees are equipped with the necessary governance and risk knowledge needed to maintain compliant
- Support legal with high-impact tasks such as regulatory reporting, external due diligence inquiries, sub-processor notices, etc
- Direct GRC department on handling international regulatory and compliance initiatives to ensure operations remain compliant globally
- Own the external auditor and external resource recommendations and selection process
- Prepare CISO with regulatory, risk, and compliance updates to communicate to the Board of Directors
- Assist with the relationship management of external auditors and own the external auditor selection process
- Act as an escalation point for the GRC program to assist with stakeholder management when necessary
Our take
Many cloud service providers can suffer from slow prediction speeds when they are used for data modeling. CoreWeave solves this problem with its specialized cloud service provider.
CoreWeave reduces prediction times and makes service requests faster and more efficient. This, in turn, cuts cloud costs considerably. This has proven to be a strong draw for many companies, with CoreWeave signing a lucrative partnership with GPU heavyweight NVIDIA as well as partnering with BitOoda, which has allowed it to expand its operations to the financial market.
However, in 2023 it closed three very significant rounds of funding (Series B and debt and secondary extensions), which is being invested into expanding its US-based data centers, opening two new ones in the coming year. The question remains whether, despite 2023's big investments in the sector, CoreWeave can maintain this momentum and whether generative AI's stock will continue to rise.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
May 2024
$1.1bn
SERIES C
May 2023
$200m
SERIES B
Total funding: $1.7bn
Company benefits
- Medical, dental, and vision coverage
- Life and disability insurance
- Flexible Spending Account
- 401k with employer match
- Flexible PTO
- Catered lunch
- Kinside Childcare Concierge Service
- Gym reimbursement
Company values
- Be Curious at Your Core
- Empower Employees
- Act Like An Owner
- Deliver Best-in-Class Client Experiences
- Achieve More Together
Company HQ
Civic Center, New York, NY
Articles
Leadership
Michael Intrator
(CEO, not founder)Was Principal Portfolio Manager at Natsource Asset Managment for over 15 years. Served as CEO of The Atlantic Crypto Corporation and Hudson Ridge Asset Management.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 51 more jobs at CoreWeave