---
title: 'Lead GRC & Security Governance at Dave'
canonical: 'https://feeny.ai/job/lead-grc-security-governance-dave-united-states-8dza0wtd8yfq'
type: 'job'
last_seen: '2026-10-14'
---

# Lead GRC & Security Governance at Dave

- **Company:** Dave
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-10-06
- **Last confirmed live:** 2026-10-14
- **Apply:** https://jobs.ashbyhq.com/dave/7c16a3d1-cb1c-4b2f-9662-eb31c6b8b65b

## Job description

Dave vs. Goliath. We’re Dave. Dave is a financial app on a mission to build products that level the financial playing field. It is redefining the financial landscape by leveraging technology to create an affordable, transparent, and user-centric access to liquidity for millions of Americans. As a leading innovator in the U.S. financial services sector, Dave’s digital financial platform offers products designed to meet the credit needs of those underserved by traditional financial institutions. Dave’s offerings include its flagship ExtraCash product, providing members up to $500 within minutes. The company is on track to launch several new product offerings in 2026, including a Buy Now Pay Later (BNPL) option.

Dave is focused on serving Americans who are financially vulnerable or living paycheck to paycheck. Dave is leading the charge in creating a new era of credit products that prioritizes speed, affordability, and accessibility, making it the go-to financial partner for those who need it most.

We’re hiring a Lead, GRC & Security Governance to build and run the governance systems that keep Dave’s technology organization controlled, resilient, and audit-ready. This is a senior individual contributor role with meaningful ownership across technology risk, controls, assurance, incident governance, and business continuity.

The Opportunity This is a new role with the opportunity to shape how technology governance works at Dave. You’ll build practical systems that give Security, IT, Engineering, and Data teams clear expectations for managing risk and demonstrating that controls work. You won’t own technical remediation. You’ll define what good looks like, establish accountability, challenge gaps, and make sure material risks reach the right decision-makers.

## What You’ll Build and Own

- Build and operate Dave’s technology governance program across technology and cyber risk, IT controls, change management, incident management, business continuity, and policies.
- Establish and maintain our technology control inventory, with clear owners, evidence requirements, operating cadence, exceptions, and escalation paths.
- Own technology assurance and audit readiness across programs including SOX ITGC, PCI, SOC 2, and other applicable frameworks. Coordinate evidence, support testing, identify gaps, and drive remediation accountability through closure.
- Own the technology and cyber risk register and control exception process. Surface material or sustained risks with clear context and recommendations, including when there’s resistance to escalation.
- Govern change management, incident management, and business continuity so expectations are practical, consistently followed, tested, and improved over time.
- Use AI and automation thoughtfully to improve evidence analysis, control mapping, policy maintenance, risk reporting, audit preparation, and remediation tracking while maintaining appropriate human review and data safeguards.

The Impact Strong governance makes it easier for Dave to move with confidence. Your work will help teams understand risk, strengthen operational resilience, meet our obligations, and build systems that hold up as the company grows.

## What We’re Looking For

- 8+ years of relevant technology experience, including significant ownership in security governance, technology risk, or security assurance.
- You’ve personally led a SOC 2 Type II, ISO 27001, or equivalent audit through a successful result—not simply supported audit preparation.
- You’ve built or materially rebuilt a governance, risk, or assurance operating model rather than only administering an established program.
- Strong technical fluency across environments such as cloud, identity, CI/CD, source control, endpoints, networks, and data platforms. You can turn ambiguous expectations into specific, testable controls and challenge answers that aren’t precise enough.
- Experience owning accountability while technical teams own remediation. You can influence Engineering, SRE, Security, IT, and Data partners without taking their work over.
- Sound judgment around risk and materiality, including demonstrated experience escalating meaningful risks when stakeholders disagreed.
- Experience partnering credibly with Internal Audit and Legal in addition to technical and Security teams.
- Strong written communication and program management skills. You turn ambiguity into clear owners, decisions, actions, dates, and evidence.

Bonus Experience with SOX ITGC, PCI DSS, NIST-based programs, AI governance or third-party AI risk, and GRC automation platforms such as Vanta or Drata.

What Makes Someone Successful Here You take responsibility for outcomes, not just deliverables. You’re comfortable defining the system, asking specific questions, and making thoughtful trade-offs between immediate needs and controls that will hold up over time. When something represents meaningful risk, you have the judgment and conviction to make it visible. You also know governance works best when technical teams see it as useful rather than bureaucratic. You build credibility with partners, seek context before reaching conclusions, and use feedback to improve the system. When priorities or requirements change, you adjust without losing sight of the underlying risk.

What to Expect You’ll have significant autonomy to shape a new function, but you won’t work in isolation. You’ll partner closely with Security, IT, Engineering, Data, Internal Audit, Legal, Compliance, and external assessors to build a governance model that works in practice—not just on paper.

## Why Join Dave

Dave is building financial products that give everyday Americans better access to their money without predatory fees. This role offers the chance to build foundational governance systems at a growing public fintech, influence how technology teams manage risk, and create an operating model that can scale with the business.

Ready to build for the underdog?

Reports to: Sr. Director, Security & IT

Don’t let imposter syndrome get in the way of an incredible opportunity. We’re looking for people who can help us achieve our mission and vision, not just check off the boxes. If you’re excited about this role, we encourage you to apply. You may just be the right candidate for this or other roles.

Why you’ll love working here: At Dave, our people are just as important as our product. Our culture reflects the values that guide who we are, how we work, and what we aspire to be. Daves are member-centric, helpful, transparent, persistent, and better together. We strive to create an environment where all Daves feel valued, heard, and empowered to do their best work. As a virtual-first company, team members can live and work anywhere in the United States, except Hawaii.

A few of our benefits & perks: 💚 Opportunity to tackle tough challenges, learn and grow from fellow top talent, and help millions of people reach their personal financial goals 💻 Flexible hours and virtual-first work culture with a home office stipend 🏥 Premium Medical, Dental, and Vision Insurance plans 👶 Generous paid parental and caregiver leave 💰 401(k) savings plan with matching contributions 📈 Financial advisor and financial wellness support 🏖️ Flexible PTO and generous company holidays, including Juneteenth and Winter Break 🎉 All-company in-person events once or twice a year and virtual events throughout to connect with your team members and leadership team

Dave Operating LLC is proud to be an Equal Employment Opportunity employer and is dedicated to cultivating a diverse and inclusive workplace. We will consider for employment all qualified applicants and do not discriminate on any basis protected by federal, state, or local law, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance relating to an applicant's criminal history.

## #LI-REMOTE

## About Dave

## Company Overview
- **One-liner**: Dave is a US neobank building AI-powered financial products that provide short-term liquidity and cash flow management tools for everyday Americans.
- **Entity Type**: Public (Ticker: DAVE on Nasdaq)
- **Headquarters**: Los Angeles, California, USA
- **Founded**: 2017
- **Founders**: Jason Wilk

## Core Business
- **Primary industry/industries**: Consumer fintech, neobanking, short-term credit, AI-powered underwriting
- **Target customers**: 185 million Americans who regularly need help covering basic necessities between paychecks; primarily B2C with a focus on underbanked and credit-challenged consumers
- **Mission or purpose statement**: To level the financial playing field for Americans who need it most

## Products & Services
- **ExtraCash®**: Flagship product; cash advance of up to $500 between paychecks with no credit check, no late fees, and no compound interest. Clear pricing at $5 per $100 borrowed. Uses CashAI™ for underwriting.
- **CashAI™**: Proprietary AI underwriting model that analyzes cash flow (not credit scores) across 180+ data points including income, bank balance, spending patterns, and transaction history. Processes billions of data points to deliver high credit limits and low loss rates.
- **DaveGPT**: Generative AI assistant integrated into the app for real-time member support, handling account management, direct deposit setup, ExtraCash management, and general questions.
- **Pay In Four Card (forthcoming)**: A short-term credit product aimed at disrupting subprime credit cards with no credit check, late fees, or compound interest, expected to launch in future.

## Market Standing
- **Valuation/Market Cap**: ~$555.9 million market cap as of 2025
- **Key Metric**: Over 14 million members; CashAI has originated more than 180 million transactions; loss rates declined to nearly 1% while originations per user grew triple digits; customer acquisition cost under $20 (vs. incumbents spending hundreds)
- **Notable Investors/Partners**: Publicly traded; leadership team includes Jason Wilk (Co-Founder & CEO), Kyle Beilman (CFO & COO), Kevin Frisch (CMO), Joan Aristei (CLO)
- **Growth Signals**: 30% of new members join via word of mouth; triple-digit growth in originations per user; loss rates declining to near 1%; developing next-generation Pay In Four card; mission-driven growth narrative

## Competitive Advantages
- **CashAI moat**: Proprietary cash-flow underwriting engine that delivers better outcomes for short-duration liquidity than traditional FICO scoring, leading to higher credit limits and lower loss rates
- **Member-centric, transparent pricing**: Flat fee structure ($5 per $100) with no hidden terms, no compound interest, and no debt sent to collections
- **Low-cost customer acquisition**: Word-of-mouth referrals drive 30% of new members at a fraction of incumbent marketing costs (<$20 vs. hundreds of dollars)
- **Speed to value**: Members can be approved for up to $500 within minutes of joining, creating a strong conversion funnel

## Strategic Focus
- **Scale the flagship**: Continue growing ExtraCash membership and transaction volume, leveraging word-of-mouth flywheel and AI-driven underwriting
- **Build next-generation credit**: Develop the Pay In Four card as a new product line aimed at subprime credit card replacement
- **Deepen AI capabilities**: Continue refining CashAI and DaveGPT as core infrastructure for underwriting and member support
- **Operating efficiency**: Maintain low operating costs to pass savings to members and sustain competitive pricing

## Why Work Here
- **Fully remote-first**: Dave is a fully virtual company; team members can work from anywhere in the U.S. (except Hawaii for now); company brings the team together 1–2 times per year plus team offsites [dave.com](https://dave.com/careers)
- **Same competitive pay regardless of location**: Compensation is not differentiated by employee work location [dave.com](https://dave.com/careers)
- **Culture values**: Member-centric, helpful, transparent, persistent, "better together" [dave.com](https://dave.com/about)
- **Benefits**: 401(k) with company match, free financial advising, generous parental and caregiver leave, comprehensive health/dental/vision/disability/life insurance, flexible PTO, Juneteenth and winter break off [dave.com](https://dave.com/careers)
- **Open roles**: Active hiring in Software Engineering, Data Analytics, Machine Learning Platform Engineering, Product Management, Security & IT (9 current openings) [jobs.ashbyhq.com](https://jobs.ashbyhq.com/dave)
- **Mission-driven**: Focus on building products that level the financial playing field for everyday Americans [dave.com](https://dave.com/about)

## Sources
1. [dave.com - About Page](https://dave.com/about)
2. [dave.com - Careers Page](https://dave.com/careers)
3. [investors.dave.com - Our Story](https://investors.dave.com/our-story)
4. [jobs.ashbyhq.com - Dave Jobs](https://jobs.ashbyhq.com/dave)
5. [linkedin.com - Dave Jobs](https://www.linkedin.com/company/dave-com/jobs)

## Other roles at Dave

- [Organic Growth & Discovery Lead (SEO/AEO)](https://feeny.ai/job/organic-growth-discovery-lead-seo-aeo-dave-united-states-y74ak7epe73b) — United States
- [Lead Technical Program Manager](https://feeny.ai/job/lead-technical-program-manager-dave-united-states-38swcv0rf5e9) — United States
- [Marketing Operations Project Manager](https://feeny.ai/job/marketing-operations-project-manager-dave-united-states-z17az8wq8jpc) — United States
- [Senior Product Manager, Financial Data Intelligence](https://feeny.ai/job/senior-product-manager-financial-data-intelligence-dave-united-states-zcmyvmeeva5d) — United States
- [Sr Director, Assistant General Counsel, Product & Regulatory](https://feeny.ai/job/sr-director-assistant-general-counsel-product-regulatory-dave-united-states-t2g2xmq9sn06) — United States
- [Lead User Acquisition Manager](https://feeny.ai/job/lead-user-acquisition-manager-dave-united-states-cx0yvpkmy4vw) — United States
- [Sr. Member Experience Manager](https://feeny.ai/job/sr-member-experience-manager-dave-united-states-f1zazfz8sas9) — United States