Lead, Security GRC (Compliance)

Gemini is seeking a Security GRC Lead to manage and be accountable for the organization’s security compliance programs, including PCI, ISO 27001, NYDFS, and SOC II reports. This role requires strong project management skills and executive-level communication abilities.

Overview

Department

Compliance

Job type

Full time

Compensation

$129,500 - $185,000 per year

Location

New York, United States

Resume Assistance

See how well your resume matches this job role with our AI-powered score. By uploading your resume, you agree to our Terms of Service

Click to upload

or drag and drop

pdf, doc, or docx (max. 10MB)

Ready to apply?

You're one step away - it takes less than a minute to upload your resume

About Gemini

Gemini is a global crypto and Web3 platform founded by Cameron and Tyler Winklevoss in 2014, offering a wide range of simple, reliable, and secure crypto products and services to individuals and institutions in over 70 countries. Our mission is to unlock the next era of financial, creative, and personal freedom by providing trusted access to the decentralized future. We envision a world where crypto reshapes the global financial system, internet, and money to create greater choice, independence, and opportunity for all — bridging traditional finance with the emerging cryptoeconomy in a way that is more open, fair, and secure. As a publicly traded company, Gemini is poised to accelerate this vision with greater scale, reach, and impact.

Responsibilities

Lead, manage, and be accountable for PCI, ISO 27001, NYDFS, and SOC II compliance programs.

Develop and oversee project plans for internal and external audits, ensuring timely execution and alignment with compliance requirements.

Drive continuous improvement in security compliance operations by implementing efficient and scalable processes.

Oversee security audits, and regulatory compliance initiatives.

In partnership with technology teams, assist in streamlining evidence collection, automate security enforcement, and optimize compliance workflows.

Mentor and guide a team, fostering a strong risk management culture and ensuring best practices.

Present compliance status, risk assessments, and mitigation strategies to senior leadership.

Align compliance goals with business objectives and coordinate efforts across multiple teams.

Minimum Qualifications

Bachelor’s degree and equivalent practical experience in cybersecurity compliance risk management.

Minimum of 8 years of experience in cybersecurity compliance with a focus on regulatory frameworks.

Proven expertise in managing NYDFS, PCI, ISO 27001, and SOC II compliance.

Exceptional project management skills, with the ability to prioritize and balance multiple initiatives effectively.

Strong analytical, problem-solving, and communication skills, capable of interfacing with senior executives.

Preferred Qualifications

Big 4 experience with security risk and compliance audits, or equivalent experience leading security compliance teams in financial services, technology firms, or other highly regulated industries.

Expertise in automating GRC processes and implementing scalable compliance solutions.

Deep understanding of regulatory compliance methodologies, audit preparedness, and enforcement strategies.

Experience working with cross-functional teams to drive enterprise-wide compliance management initiatives.

Experience leveraging GRC tooling (e.g., AuditBoard) to support governance, risk and compliance activities.

Experience in team management, and overseeing strategic compliance initiatives is a strong plus but not required.

It Pays to Work Here

The compensation & benefits package for this role includes:

Competitive starting salary

A discretionary annual bonus

Long-term incentive in the form of a new hire equity grant

Comprehensive health plans

401K with company matching

Paid Parental Leave

Flexible time off

Hybrid Work

In the United States, we offer a hybrid work approach at our hub offices, balancing the benefits of in-person collaboration with the flexibility of remote work. Expectations may vary by location and role, so candidates are encouraged to connect with their recruiter to learn more about the specific policy for the role. Employees who do not live near one of our hubs are part of our remote workforce.

EEO Statement

At Gemini, we strive to build diverse teams that reflect the people we want to empower through our products, and we are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. Equal Opportunity is the Law, and Gemini is proud to be an equal opportunity workplace. If you have a specific need that requires accommodation, please let a member of the People Team know.