DirectJobHub
Jobs · Georgia

Director, Governance, Risk & Compliance

Candescent · Atlanta, GA · 1 mo ago
Full-time

Position Summary

Candescent is seeking an experienced Director of Governance, Risk, Compliance & Vendor Management to lead the organization's audit, compliance, third-party risk management (TPRM), and vendor governance functions.

Key Responsibilities

  • Lead Candescent's Governance, Risk, Compliance, Third-Party Risk Management, and Vendor Management programs.

  • Manage and oversee SOC 2 Type II, PCI DSS, customer audits, and banking regulatory examinations.

  • Ensure compliance with applicable banking, security, and privacy requirements, including FFIEC guidance, GLBA, and PCI DSS.

  • Direct the vendor lifecycle, including onboarding, risk assessments, ongoing monitoring, contract reviews, and offboarding.

  • Partner with Legal, Procurement, Technology, Product, and Operations teams to manage risk and compliance obligations.

  • Develop executive reporting on audit readiness, compliance status, vendor risk, and remediation activities.

  • Lead customer compliance engagements, due diligence reviews, and security assurance activities.

  • Build, mentor, and develop a high-performing team while driving process improvements and operational efficiency.

Required Qualifications

  • Bachelor's degree in Information Systems, Cybersecurity, Business, Finance, Accounting, or a related field.

  • 10+ years of experience in audit, compliance, risk management, vendor management, or information security within banking, fintech, or financial services.

  • 5+ years of leadership experience managing professional teams.

  • Deep expertise leading SOC 2 Type II and PCI DSS audit programs.

  • Strong understanding of US banking regulations and frameworks, including FFIEC and GLBA.

  • Experience with third-party risk management and vendor governance programs.

  • Proven ability to lead audits, manage remediation efforts, and present results to executive leadership and customers.

Preferred Qualifications

  • CISA, CISM, CRISC, CIA, CTPRP, or equivalent certifications.

  • Experience supporting cloud-based financial technology platforms.

  • Experience interacting with banking regulators, customers, and external auditors.

Similar jobs