How much experience is required?

At least 10 years of relevant experience for this Director, Governance, Risk & Compliance role.

What's the tech stack?

Joblaze extracted these technologies from the posting: CCPA, GDPR, Governance, Risk, Compliance, HIPAA, ISO 27001, Information Security.

What seniority level is this role?

MX targets director candidates for this position.

Is this full-time or contract?

Full-time for this Director, Governance, Risk & Compliance role at MX.

Director, Governance, Risk & Compliance at MX

Joblaze summary

The Director of Governance, Risk & Compliance at MX is responsible for leading the company's security governance and compliance initiatives, ensuring that regulatory standards are met while supporting business agility. This role requires extensive experience in information security and compliance frameworks, along with a strong background in fintech or regulated industries. Ideal candidates will have a proven track record in managing compliance programs and fostering cross-functional collaboration. MX's culture emphasizes accountability and innovation, making it a fitting environment for a strategic leader.

Joblaze insights

Listed 10 days ago on Joblaze — tracked directly from MX's career page.
MX has 13 other open roles including Sr. Observability Engineer, Staff Technical Program Manager, Sr. Cloud Platform Engineer.
102 active SOC 2 roles on Joblaze right now.
90 active ISO 27001 roles on Joblaze right now.
77 active GDPR roles on Joblaze right now.
Typical SOC 2 salary we track runs $130,000–$181,500 (median $168,000, across 51 roles).

Quick facts

How much experience is required?: At least 10 years of relevant experience for this Director, Governance, Risk & Compliance role.
What's the tech stack?: Joblaze extracted these technologies from the posting: CCPA, GDPR, Governance, Risk, Compliance, HIPAA, ISO 27001, Information Security.
What seniority level is this role?: MX targets director candidates for this position.
Is this full-time or contract?: Full-time for this Director, Governance, Risk & Compliance role at MX.

From the original posting

MX is a fintech company on a mission to empower the world to be financially strong. We build technology that helps banks, credit unions, and fintechs deliver smarter, more intuitive financial experiences to millions of people.

Like many startups, we’ve navigated real growth challenges — and we’ve come out stronger on the other side. Today, MX is in a phase of renewed momentum and scale, with a solid foundation and a clear vision for what’s next. This is a place where thoughtful execution matters, innovation is encouraged, and individuals have real ownership over their work.

Our culture values curiosity, accountability, and impact. We give people the space to question assumptions, design better solutions, and help shape how the company grows. If you’re looking to do meaningful work, influence outcomes, and grow alongside a company that’s ready to move fast, you’ll feel at home at MX.

As we continue to grow our platform and expand our customer base, we're looking for an experienced Director of Governance, Risk & Compliance (GRC) to lead our enterprise Information Security Governance, Risk, Compliance, and Privacy programs. This leader will partner across Security, Engineering, Legal, Product, Sales, Customer Success, and Operations to ensure MX maintains industry-leading security and privacy standards while enabling the business to move quickly and responsibly.

Reporting directly to the VP & Chief Information Security Officer (CISO), you will lead the Compliance team and own the strategy, execution, and continuous improvement of MX's security governance, privacy, and regulatory compliance programs.

What You'll Do

Lead Governance, Risk & Compliance

Develop and execute MX's enterprise Governance, Risk & Compliance (GRC) strategy.
Build, mature, and continuously improve security, privacy, and risk management programs that align with business objectives and regulatory requirements.
Develop, maintain, and operationalize enterprise-wide security policies, standards, controls, and governance processes.
Establish scalable compliance frameworks that support continued company growth while reducing organizational risk.

Own Privacy & Regulatory Compliance

Lead the company's global privacy program across multiple jurisdictions.
Ensure compliance with applicable privacy regulations, including GDPR, CCPA, HIPAA, PIPEDA, UK Data Protection Act, and other emerging regulations.
Partner with Legal, Engineering, Product, and business stakeholders to perform Privacy Impact Assessments (PIAs) and advise on privacy requirements throughout the product lifecycle.
Develop governance frameworks for responsible data collection, storage, processing, retention, and sharing.
Oversee data mapping initiatives, vendor privacy reviews, and data governance practices.

Manage Audits & Customer Assurance

Own all internal and external security, privacy, and compliance audits.
Lead certification efforts including SOC 2, ISO 27001, PCI DSS, and other applicable frameworks.
Serve as the executive owner for customer security and privacy questionnaires.
Partner with Sales and Customer Success to support enterprise customer due diligence and security reviews.

Drive Risk Management

Continuously assess organizational security, compliance, and privacy risks.
Monitor effectiveness of security controls and recommend improvements where necessary.
Build reporting and metrics that provide executive leadership visibility into organizational risk posture.
Develop mitigation strategies and partner across engineering and operations to reduce risk.

Lead & Develop the Team

Lead, mentor, and grow a high-performing Compliance and Privacy team.
Foster a culture of accountability, operational excellence, and continuous improvement.
Develop scalable processes that improve efficiency while maintaining regulatory compliance.

Build Cross-Functional Partnerships

Partner closely with Security, Engineering, Legal, Product, Sales, Support, and Operations to embed security and privacy into business processes.
Influence stakeholders across the organization to balance business objectives with regulatory obligations.
Lead company-wide privacy and compliance awareness initiatives and employee training programs.

Basic Qualifications

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Business, Legal Studies, or a related field.
10+ years of experience leading Information Security Governance, Risk, Compliance, Privacy, or Security Operations programs.
Deep expertise with compliance frameworks
Experience implementing Governance, Risk & Compliance (GRC) platforms and common control frameworks.

Preferred Qualifications

Professional certifications such as: CIPP, CIPM, CIPT, CISM, CISA
Experience working within fintech or highly regulated industries.
Knowledge of Business Continuity Planning and Disaster Recovery.
Experience supporting multinational organizations with global regulatory requirements.
Familiarity with Web Application Firewalls (WAFs), Content Delivery Networks (CDNs), and modern cloud infrastructure.

MX is proudly committed to recruiting and retaining a diverse and inclusive workforce. As an Equal Opportunity Employer, we never discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, military or veteran status, status as an individual with a disability, or other applicable legally protected characteristics. We particularly welcome applications from veterans and military spouses. All your information will be kept confidential according to EEO guidelines. You may request reasonable accommodations by sending an email to hr@mx.com.