Snapdocs

Snapdocs powers homeownership.

Director, Governance Risk and Compliance at Snapdocs

Location
San Francisco, California, United States / Remote
Job Type
Full-time
Experience
11+ years
Apply to Snapdocs and hundreds of other fast-growing YC startups with a single profile.
Apply to role ›

About the role

Snapdocs is a rapidly growing company backed by investors like Sequoia, Y Combinator, F-Prime and Tiger Global. We're an innovative team taking on the extensive mortgage market, bringing scalable and sophisticated software to a pillar of the US economy that still relies on fax machines and manila envelopes.

As our company continues to grow it's now time to bring in a Director, Governance Risk and Compliance to develop and lead a strategic roadmap of the GRC and Privacy function here at Snapdocs. 

This position reports directly to the Chief Information Security Officer (CISO), the GRC Director will drive data related governance, risk, and compliance efforts at Snapdocs while working with both internal/external stakeholders to ensure our products, data security and privacy practices are compliant while continuously improving. Fully responsible for leading GRC platform initiatives, your small yet nimble team will develop and maintain a comprehensive risk assessment and risk management program based on industry standards such as NIST, OCTAVE, FAIR and the like. Ever aware of legislative changes or amendments, this role will partner with legal teams to maintain a state of compliance by monitoring industry requirements for certifications and attestations relevant to Snapdocs (MISMO, RON, SOC2, GLBA, NIST, etc). In your day to day, you seek to find efficiencies and automate risk management processes and responses to compliance requests of the business. You aspire to reduce risk, improve security, privacy control effectiveness and compliance through an integrated and unified approach that reduces the ill effects of organizational silos and redundancies. GRC Initiatives moving forward will be vast. Your projects span but are not limited to the development of security governance programs that align with industry best practices, improving the efficiency of our third party risk management program to creating a data protection and privacy program with technical controls to enable consistent data protection and privacy best practices. In addition, we will look to you to be an agent of change for enhancing security/privacy awareness training programs at Snapdocs. 

The Director, GRC at Snapdocs is a leadership position requiring a minimum 10 years experience in governance, risk, compliance, data protection and privacy or a combination thereof. Our ideal candidate brings broad people and team management experience from time spent working in high growth cloud service provider (PaaS/SaaS) organizations with an expertise in standards, regulatory certifications and attestations such as SOC2 GLBA, NIST CSF and 800-53, and CCPA/CPRA. The recipe for success will marry your people leadership skills with extensive knowledge of cloud security technologies such as firewalls, intrusion detection systems (IDS), data leakage protection (DLP), access management, anti-malware, and SIEM. You know when to lead, but this diverse experience gives you the ability to roll up your sleeves when required. Icing on the cake would be experience working with COSO, COBIT frameworks and understanding their role in risk management and controls implementation. Things change quickly around here so being comfortable operating in a fast-paced environment with shifting priorities while balancing business impact against compliance and security requirements will be vital. Prior history working in financial services or mortgage industry standards and regulations is highly preferred. 

Snapdocs strongly values diversity and drive. We want to work with people of different backgrounds and different paths in life, and we trust our team to make smart decisions. This means we value independent work as well as collaboration. We provide outstanding benefits (listed below) and while we have hubs in both San Francisco and Denver, we're an extremely remote-friendly company with over a third of our staff outside of those two hubs!

Our benefits include (but are not limited to):

  • 4 weeks + 1 day of vacation
  • Excellent health, dental, and vision benefits
  • 401(k) with up to 4% company match
  • 16 weeks paid parental leave (regardless of gender)
  • Flexible spending account for healthcare and dependent care
  • Galileo, Modern Health, Urban Sitter, and Northstar Financial memberships
  • Life and disability insurance
  • Commuter benefits
  • 10 year exercise window on your equity (!!)

Snapdocs is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or special need that requires accommodation, please let us know.

California residents applying for positions at Snapdocs are subject to our candidate privacy policy.

 

Why you should join Snapdocs

Snapdocs powers homeownership. Using technology, we’re building the connective tissue for an entire pillar of the U.S. economy: residential real estate.

Today, we’re working to perfect mortgage closings, but that’s only the beginning. If we succeed, more than five million families per year will gain clarity and transparency as they make the biggest financial decision of their lives: buying a home. Before Snapdocs, no one felt responsible or empowered to solve the problems we face every day we come to the office.

It's complex and difficult work, and the result is not an app we brag about at tech industry parties. Instead, we're making a difference and carefully building a team that shares our priorities—pragmatism, respect and empathy for our clients, and building honest products that improve all our users’ lives.