Director of Security GRC

Pax8

4d • $160,000 - $180,000 • Remote

About The Position

Pax8 is hiring a Director of Security GRC to shape how security governance, risk, and compliance protect and enable its fast-moving, technology-led global business. The role leads security governance and risk practices, strengthens frameworks for risk-informed decisions, and evolves the security program in response to artificial intelligence, automation, cloud technology, and changing threats.

The Director will set clear and practical security policies and standards; establish disciplined processes for evaluating policy exceptions, prioritizing remediation, and promoting adherence; and improve visibility into risk and control effectiveness. The role partners across information technology, engineering, legal, data, human resources, and other teams to embed security in business processes. It also establishes meaningful security performance and risk indicators, contributes to automation and tooling decisions, guides GRC professionals, and translates evolving threats and industry practices into practical program improvements.

This is a remote role in the United States requiring adequate secure and private internet service, with infrequent travel expected. Applicants must have valid authorization to work in the United States. A related bachelor's degree or equivalent professional experience is required. Salary is $160,000–$180,000.

Requirements

• Extensive experience leading or working in information technology security governance, risk, and compliance environments.
• Expertise in security policy, exceptions, remediation, risk assessment, and risk-based prioritization.
• Strong understanding of public cloud security, including risks and controls associated with cloud deployments.
• Practical understanding of Zero Trust security principles.
• Working knowledge of security frameworks and assurance approaches, including the NIST Cybersecurity Framework, ISO 27001:2022, MITRE ATT&CK, and SOC 2.
• Experience supporting incident management and response planning.
• Ability to translate complex risk information into clear priorities and meaningful security initiatives.
• Leadership and communication skills to align technical and non-technical stakeholders.
• Related bachelor's degree or equivalent professional experience.
• Valid right to work in the United States.
• Adequate secure and private internet service for remote work.

Nice To Haves

• Risk or security certifications such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP).

Responsibilities

• Set clear, practical security governance policies and standards that can evolve with the business.
• Establish a disciplined process to evaluate exceptions, prioritize remediation, and promote policy adherence.
• Improve visibility into risk and control effectiveness and identify where investment can best improve security maturity.
• Partner with information technology, engineering, legal, data, human resources, and other teams to incorporate security into business processes.
• Establish key performance and risk indicators that provide actionable insight to leaders and stakeholders.
• Contribute to automation and tooling decisions that support security policies, standards, and risk objectives.
• Guide governance, risk, and compliance professionals and build strong partnerships across the organization.
• Translate evolving threats and industry practices into practical security program improvements.
• Support incident management and response planning.

Benefits

• 401(k) with company match
• Medical, dental, and vision coverage
• Employee Assistance Program (EAP)
• Employer-paid life, AD&D, short-term disability, and long-term disability insurance
• Flexible open PTO
• Paid sick leave
• Paid parental leave
• RTD EcoPass for eligible Colorado-based employees
• Internal development hub and access to Learning & Development trainers, AI-powered tools, mentors, and cross-continent collaboration

What This Job Offers

• Job Type: Full-time
• Career Level: Director