Expert Technical Governance & Operational Readiness Manager

Key Responsibilities

• Roadmap & Framework Execution: Translate and execute the technical tracks of the IT governance roadmap, ensuring Product, Engineering, and Trust team operations align with firm policies and external requirements.
• Control Framework Mapping: Establish and maintain a unified control framework that explicitly maps Topstep’s technical architecture, cloud infrastructure, and technical architecture to established governance standards.
• Policy Architecture & Lifecycle Governance: Centralize, maintain, and operationalize a comprehensive technical procedures and documentation library based on policies established and authorized by the Chief Compliance Officer. Manage the technical review, attestation, and exception tracking processes for all engineering and technical partners.
• Audit Readiness & Evidence Automation: Architect, launch, and manage an end-to-end, continuous audit readiness program. Partner with internal audit, enterprise compliance, and our product & engineering teams to replace point-in-time compliance checks with automated, real-time evidence collection pipelines.
• Tech Escalation & Subject Matter Expertise: Serve as the primary Individual Contributor (IC) and core escalation point for all technical governance queries, translating abstract framework criteria into concrete requirements for product and infrastructure engineering teams.

Required Qualifications And Key Competencies

• 6 + years of progressive experience in IT GRC, IT audit, or technical compliance within high-growth fintech, SaaS, or highly regulated technology environments.
• Demonstrable track record of project-level ownership, specifically proving you can implement and scale technical control frameworks, readiness roadmaps, and automated evidence gathering in an immature program environment.
• Deep working knowledge of core security and governance frameworks, including SOC 2 Type II, ISO 27701/27001, NIST CSF, and financial sector regulatory standards.
• Technical tooling expertise with modern, cloud-native GRC platforms (e.g., Vanta, Drata, Anecdotes, or LogicGate), including hands-on experience configuring API integrations for continuous control monitoring and automated evidence gathering.
• Engineering literacy necessary to speak the same language as Cloud Infrastructure and Product Engineering teams; ability to evaluate development/deployment pipelines, system architecture, and access controls for compliance risks.
• Autonomy and execution depth to independently manage complex, cross-functional compliance initiatives from conception to execution without requiring daily managerial direction.
• Proficient in establishing Key Performance Indicators (KPIs) and technical compliance metrics to provide leadership with transparent reporting on control health, policy exceptions, and audit readiness trends.
• A unwavering commitment to confidentiality and ethical conduct, particularly when handling sensitive system vulnerability data, internal access logs, or proprietary fintech intellectual property.

Company Culture & Perks

• Engaging working environment ranging from fully remote to hybrid.
• Culture of collaboration through keeping cameras on during meetings and maintaining a robust Slack environment for communication.
• Seven Company-paid Holidays and generous Family Leave.
• Paid time off is front-loaded.
• Competitive 401(k) matching, health, dental, and vision insurance are offered for full-time employees.
• New Hire Base Salary Range $140,000 - $160,000 annually.
• The compensation offered will take into account the internal compensation structure and may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience, among other factors.
• This position is eligible for a performance-based bonus as provided by the plan terms and governing documents.