Lead, Security GRC

@ Gemini

About Gemini

Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014. With trusted crypto products and services in over 70 countries, Gemini bridges traditional finance with the emerging cryptoeconomy.

The Department: Security Governance, Risk & Compliance (GRC)

This role is part of the Security Governance, Risk & Compliance team.

The Role: Lead, Security GRC

Gemini is seeking a Security GRC Lead to own and drive the organization’s security governance programs. You will partner with senior leadership and cross-functional teams to implement best-in-class security frameworks, develop policies, and enforce governance across the enterprise.

Responsibilities

• Governance Ownership: Set vision, priorities, and operating model for security governance.
• Policy Management: Establish and maintain security policies, standards, and procedures.
• Oversight: Lead policy lifecycle, control design and regulatory compliance efforts.
• Cross-Functional Enablement: Partner with engineering, IT, and business units to embed security governance.
• Reporting: Define metrics, dashboards and report outcomes to executive leadership.
• Culture and Leadership: Mentor teams and shape a culture of accountability and transparency.

Minimum Qualifications

• Bachelor’s degree or equivalent in cybersecurity or related field.
• 8+ years’ experience in security governance.
• Proven track record in establishing governance frameworks and policies.
• Expertise in frameworks (ISO 27001, NIST CSF, SOC 2, PCI DSS, NYDFS).
• Relevant certification (CISSP, CISM, or similar).

Preferred Qualifications

• Big 4 or consulting experience in governance design.
• Experience with GRC platforms (e.g., AuditBoard).
• Familiarity with cloud-native environment governance (AWS, GCP, Azure).
• Strong executive presence and enterprise alignment skills.

Compensation & Benefits

Competitive starting salary, discretionary annual bonus, new hire equity grant, comprehensive benefits including health, 401K matching, paid parental leave and flexible time off.

Work Arrangement

This is a full-time leadership position. The candidate is required to be in person twice a week at either our San Francisco, CA or New York City, NY office with a hybrid work approach.

Key skills/competency

• Security Governance
• Risk Management
• Policy Development
• Regulatory Compliance
• Executive Communication
• Framework Implementation
• Stakeholder Engagement
• Audit and Reporting
• GRC Platforms
• Cloud Security