Security Program Manager

Join a leading fintech company that's democratizing finance for all.
Robinhood was founded on a simple idea: that our financial markets should be accessible to all. With customers at the heart of our decisions, Robinhood is lowering barriers and providing greater access to financial information. Together, we are building products and services that help create a financial system everyone can participate in.
As we continue to build...
We're seeking curious thinkers looking to co-author the next chapters of our story. Joining now means helping shape our vision, structures and systems; playing a key-role as we launch into our ambitious future.
Check out life at Robinhood on The Muse !
About the role
Robinhood's Security & Privacy organization is looking for a stellar program manager to oversee Policy Governance. As part of this role, you will own the end-to-end lifecycle of the policy corpus, and other relevant standards and procedures that support the program and provide guidance for the company. You will define the program mission, perform gap analysis and create a strategic plan for prioritizing and addressing the gaps in collaboration with various cross-functional teams, including compliance, legal, engineering and risk management.
The ideal candidate will thrive on working cross-functionally, building trust and maintaining great working relationships across a number of functions. You have experience in building governance documentation programs and are an excellent writer that can produce clear documentation and drive consensus on it across the organization.
You will also manage the exception process and build a process for ingesting, reviewing, approving/rejecting, and closing out exceptions to the standards.
The role is currently an individual contributor function with the ability to have significant organizational impact and influence.
Your day-to-day will involve:

• Assessing the current state of governance documentation, including security policies, operational standards, and guidelines.
• Defining a governance documentation program and creating a detailed plan to deliver the objectives of the program
• Writing policies, standards, operational procedures, and Standard Operating Procedures (SOPs)
• Meeting with stakeholders to review and obtain sign-off on standards
• Creating and running an exceptions approval process and committee
• Tracking action items for closing out exceptions and policy reviews
• Working with Risk Management and Internal Audit to assess the company against the documentation
• Presenting the program and findings against the documentation to regulators and executive management

About you:

• Bachelor's degree or equivalent experience in Computer Science, Engineering, Information Systems, Cybersecurity, Business/Risk Management, or related fields
• Experience in governance documentation such as security policies and standards
• Experience writing security and engineering policies and standards
• Experience building and program managing complex cross-functional programs
• Excellent technical writing skills
• Experience in one or more security disciplines
• Familiarity with security frameworks and standards (e.g., NIST, ISO)

Bonus points:

• Advanced degree in a related field
• Experience writing SOPs that are tested under a Written Supervisory Procedure (WSP)
• Experience in a highly regulated environment and/or public companies
• Experience with off-the-shelf GRC and program management tools (e.g., Jira)
• CISSP, CISM, ISSMP, or similar certification
• Program lead experience
• Security Risk/Control Assessment experience

CO Residents: In Colorado, the base pay for this position ranges from $129000 to $172000. This role is also eligible for an annual discretionary bonus and participation in Robinhood's equity plan.
We're looking for more growth-minded and collaborative people to be a part of our journey in democratizing finance for all. If you're ready to give 100% in helping us achieve our mission-we'd love to have you apply even if you feel unsure about whether you meet every single requirement in this posting. At Robinhood, we're looking for people invigorated by our mission, values, and drive to change the world, not just those who simply check off all the boxes.
Robinhood promotes diversity and provides equal opportunity for all applicants and employees. We are dedicated to building a company that represents a variety of backgrounds, perspectives, and skills. We believe that the more inclusive we are, the better our work (and work environment) will be for everyone. Additionally, Robinhood provides reasonable accommodations for candidates on request and respects applicants' privacy rights. To review Robinhood's Privacy Policy please visit Robinhood - US Applicant Privacy Policy .
Click here to learn more about Robinhood's Benefits.
Robinhood is a primarily remote company. If hired, you will work as a remote employee unless the job you are applying for has a different working model specified. Please reach-out to your recruiter if you have any questions regarding the job's working model.