Director, Governance, Risk & Compliance

Los Angeles. Posted 9 days ago

The role

You will own the GRC program end to end and build the function to keep the company audit-ready. You will lead and mentor a GRC team, including an ISSO and ISSM, while managing control frameworks, risk management, and audits.

What you will do

Own Apex's GRC program end to end
Establish and maintain control frameworks, policies, standards, and procedures
Lead, manage, and mentor the GRC team
Drive compliance against NIST SP 800-171, CMMC, and FedRAMP
Own the commercial security certification roadmap for SOC 2 Type II and ISO 27001
Partner with Legal and Trade Compliance on export control and privacy obligations
Build and run the enterprise risk management process
Manage the full audit and assessment lifecycle
Establish a centralized control framework
Run the vendor and third-party risk program

Required qualifications

8+ years in governance, risk, and compliance, information security, or a closely related field
Direct experience owning a GRC or security compliance program
Experience leading and managing people
Deep, hands-on knowledge of NIST SP 800-171 and the NIST frameworks (800-53, RMF/CSF)
Practical experience in CMMC and/or FedRAMP authorization work
Demonstrated ownership of commercial security certifications SOC 2 and/or ISO 27001
Working familiarity with export control (ITAR/EAR) and data privacy (GDPR, CCPA) obligations
Proven ability to manage audits and assessments end to end
Strong cross-functional communication skills
U.S. Person status

Nice to have

J.D. law degree or master's degree in public policy
Experience in aerospace, defense, space, or another regulated hardware/manufacturing environment
Active or prior U.S. government security clearance
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CCSP
Experience standing up a GRC program or control framework from the ground up in a high-growth company
Familiarity with GRC tooling and automated evidence-collection / continuous-monitoring platforms
Experience building compliance for a product or platform that is itself sold or licensed to customers

Benefits

Equity in Apex
100% company-paid medical, dental, and vision for you and your dependents
$100k life insurance at no cost
Starting at 15 days vacation, growing to 20+ days annually
10 paid holidays
100% match on first 3% and 50% on next 2% 401(k) matching
8 weeks paid parental leave
Childcare reimbursement up to $350/day for work-related travel
Daily catered lunch and unlimited snacks
Monthly office socials, pickleball tournaments, run club, and gatherings
Dream desk setup

Before you apply

U.S. Person status is required
Must qualify as a U.S. Person or be able to obtain required export authorizations

About the company

Apex manufactures satellite buses at scale using software, vertical integration, and hardware. The company is a fast-growing startup that has raised more than $500M in funding.