[Hiring] Director of Security GRC @Pax8

Role Description

Pax8 is hiring a Director of Security GRC in the United States to shape how security governance, risk, and compliance protect and enable a fast-moving, technology-led global business.

This is an opportunity to lead at the intersection of security, risk, technology, and business strategy. You’ll strengthen the frameworks that help Pax8 make smart, risk-informed decisions, while evolving security governance for a world increasingly shaped by artificial intelligence, automation, cloud technology, and rapidly changing threats.

You’ll have the scope to influence how we manage security policies, understand risk, measure control effectiveness, and continually mature our security program. You’ll also grow alongside new technology, helping us make thoughtful choices about automation and the tools that support our security strategy.

What you’ll lead

• Set the standard for security governance, creating an environment where policies and standards are clear, practical, understood, and capable of evolving with the business.
• Turn exceptions into intelligent risk decisions, establishing a disciplined approach for evaluating deviations, prioritizing remediation, and promoting policy adherence.
• Make risk visible, helping us understand control effectiveness and where investment can have the greatest impact on security maturity.
• Bring security into the way we work, partnering across information technology, engineering, legal, data, human resources, and other teams so security is considered throughout business processes.
• Use meaningful measures, establishing key performance and risk indicators that turn complex security activity into actionable insight for leaders and stakeholders.
• Advance security through technology, contributing to automation and tooling decisions that support our policies, standards, and risk objectives.
• Develop people and capability, providing guidance and direction to governance, risk, and compliance professionals while creating strong partnerships across the organization.
• Keep us ready for what comes next, translating evolving threats and industry practices into practical improvements to our security program.

The impact you’ll make

You’ll help make security governance a business enabler. Your leadership will give teams greater clarity around risk, strengthen accountability for remediation, improve visibility of control effectiveness, and help Pax8 continuously mature its security program as the organization and threat landscape evolve.

Qualifications

• Extensive experience leading or operating within information technology security governance, risk, and compliance environments.
• Proven expertise across security policy, exceptions, remediation, risk assessment, and risk-based prioritization.
• A strong understanding of public cloud security, including the risks and controls associated with cloud deployments.
• Practical understanding of Zero Trust security principles.
• Strong working knowledge of security frameworks and assurance approaches such as the National Institute of Standards and Technology Cybersecurity Framework, International Organization for Standardization 27001:2022, MITRE ATT&CK, and System and Organization Controls 2.
• Experience supporting incident management and response planning.
• The judgment to turn complex risk information into clear priorities and deliver meaningful security initiatives.
• Leadership and communication skills that enable you to bring technical and non-technical stakeholders together around shared outcomes.
• A related bachelor’s degree or equivalent professional experience.
• Risk and security certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, or Certified Information Systems Security Professional are welcomed.

Requirements

• This is a remote role requiring adequate secure and private internet service.
• Infrequent travel is expected.

Benefits

• Salary $160-180k
• 401(k) with Company Match
• Medical, Dental & Vision Coverage
• Employee Assistance Program (EAP)
• Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
• Flexible Open PTO
• Paid Sick Leave
• Paid Parental Leave
• RTD EcoPass (eligible Colorado-based employees)