GRC Lead

Who We Are The Farmer’s Dog was born from a mission to change the landscape of pet health, providing dogs and their humans with honest, smart, and simple care. We’re starting by radically improving the $90 billion pet food industry, replacing bags of highly-processed pellets with a personalized subscription service that sends complete and balanced, freshly-made dog food directly to customers’ doors. Our ultimate goal is to create innovative, delightful and personalized experiences across all aspects of pet care, and we believe our direct-to-consumer business model, holistic approach to growth, and dynamic culture uniquely position us to shepherd this backwards industry into the future. To date, The Farmer’s Dog has delivered over 1 billion meals nationwide and raised over $150M in funding to help us build a company as healthy as the dogs who are eating those meals. Join us as we continue to develop ways of bringing peace of mind to customers, health to their companions, and much-needed change to the way people feed and care for their pets. #LongLiveDogs What We Stand For and Where You’ll Come In As the Governance Risk and Compliance (GRC) Technical Lead , you’ll be a key risk leader, You'll shape GRC strategy and build the operational muscle that enables TFD to earn and maintain customer trust at scale. Through this role, you’ll be responsible for building broader awareness and understanding of the technical risks to our business, defining processes and taking action to mitigate and reduce risk. You will work day-to-day on vendor assessment and management of a risk register, improving the existing program to ensure understanding and compliance with regulatory and audit requirements. One Team: We don’t think of ourselves as “Acquisition Marketers”, “Engineers”, “Data Analysts”, or “Product Managers”. Beyond denoting skill sets and areas of expertise, we don’t think departments matter. We’d rather align ourselves to the goals we’re working to achieve and make sure we have necessary subject matter expertise to drive meaningful impact. We strive to orient ourselves around customer problems TOGETHER – getting the right people, with the right context, in the right rooms/Zooms to solve problems holistically. We are skeptical about everything and precious about nothing: Ideas can and should come from anywhere, and we aren’t tied to our own. We proactively source input. We talk to our customers and leads regularly and are quick to change course if we know there’s a better or more impactful way to solve problems. We consider the customer journey in all of our decisions: We know that no interaction exists in a silo and therefore understand how important every single one is. We ensure our strategy sets prospective and new customers up for success and drives long-term retention. We answer questions and address problems early and proactively. We understand the value of different channels, initiatives, and messages and know how to articulate impact and advocate for prioritization holistically. We Execute For Impact: We don’t subscribe to “best practices” or “industry KPIs”. We’re uninterested in how we compare to “benchmarks”; instead we orient ourselves around being the best we can possibly be. Similarly, we don’t subscribe to rigid or classical expectations of roles – i.e. acquisition is hyper-focused on improving customer retention and experience. We Are Focused and Work Without Assumption : We are not beholden to ideas. We have goals and believe everything beyond that is a series of hypotheses to validate. To that end, we seek to work in sequence and not in parallel. We constantly ask ourselves, “what’s the most important hypothesis I should be working on right now? How do I confirm or reject that hypothesis as fast as possible?”. We rarely have timelines/deadlines and are constantly taking in new information and adjusting our priorities accordingly. We don’t expect to be perfect the first time. How You'll Make An Impact • Develop and mature processes for risk identification and prioritization, control assessment, testing and issue management • Continuously assess risks for new and existing vendors using defined process and philosophy while looking for ways to iterate • Lead TFD to achieve and maintain ongoing compliance with standard regulatory frameworks • Oversee cybersecurity-focused audits and maturity assessments to assess and validate controls and adherence to policy and regulation • Own and maintain TFD’s risk register to track and prioritize business risk • Collaborate cross-functionally to understand, assess, and inform the organization about risks, generating evidence of remediation • Communicate and educate on risk to stakeholders at all levels, define a cadence and structure to maintain consistency of risk communication • Execute Business Continuity Planning (BCP) tasks, including Business Impact Analysis (BIA), and Incident Response planning We're Excited About You Because • You hold comprehensive…