Director, Governance, Risk & Compliance

🔥 14 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

🚔 Compliance

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Doppel

WebsiteLinkedInAll Job Openings

1 - 10 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

Doppel is an AI-driven security company specializing in brand protection and digital risk management. Recognized as a leader in the G2 Grid® Report for Brand Protection, Doppel combines artificial intelligence with human expertise to detect and dismantle threats like phishing, impersonation, and crypto scams. Their services cater to a wide array of industries, providing proactive defense across websites, social media, and the dark web. Doppel's solutions include anti-phishing, executive protection, and threat intelligence, ensuring comprehensive digital safety for high-profile figures and major brands. With a focus on rapid threat response and cost-effectiveness, Doppel enhances trust and security for clients worldwide.

📋 Description

• Define and execute Doppel's multi-year GRC strategy, operating model, and roadmap • Establish priorities, investments, tooling and automation strategy, KPIs, and governance mechanisms • Lead, develop, and grow the GRC team; define structure, roles, accountability, and career paths • Own strategy and executive accountability for SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001, and future frameworks • Establish audit readiness, management systems, control ownership, remediation, and auditor relationships • Establish and evolve enterprise and security risk management, including risk appetite, assessment methodology, escalation, risk acceptance, and executive review • Set strategy for common controls and continuous assurance across ISO, SOC 2, NIST, privacy, and customer requirements • Govern control testing, access risk, exceptions, corrective actions, evidence quality, and automation • Establish vendor, partner, and AI-related risk governance, including tiering, due diligence, contracts, monitoring, and escalation • Own customer security and privacy assurance, Trust Center content, security reviews, and RFP support • Partner with Sales and Customer Success to reduce security-related friction in enterprise deals • Establish scalable privacy and responsible AI governance with Legal, Product, Engineering, and Security • Provide executive oversight of incident preparedness, business continuity, disaster recovery, and operational resilience • Deliver reporting on enterprise risk, compliance posture, control effectiveness, third-party risk, and certification status to executives and the board • Represent Doppel with auditors, strategic customers, and external stakeholders

🎯 Requirements

• 10+ years of experience across GRC, security risk, compliance, security audit, or related disciplines, including significant experience leading teams and owning a GRC function or similarly broad program • Experience building and scaling GRC programs and teams in a high-growth technology, SaaS, cybersecurity, or similarly complex environment • Demonstrated ability to advise senior executives and translate security, compliance, and regulatory risk into business decisions and priorities • Executive ownership of SOC 2 Type II and ISO 27001 through multiple certification and surveillance cycles, including program strategy, scoping, auditor management, remediation, and management review • Experience with ISO 27701, ISO 42001, or comparable privacy and AI governance programs strongly preferred • Deep understanding of ISMS/PIMS/AIMS, Trust Services Criteria, common control frameworks, control assurance, and cloud-first evidence requirements • Experience designing and operating enterprise risk management programs, including risk appetite, risk registers, governance forums, escalation, remediation, and formal risk acceptance • Experience overseeing third-party risk, access governance, privacy, customer security assurance, and core GRC programs at scale • Track record building high-performing teams, developing talent, establishing ownership models, and evolving organizational structure • Experience developing GRC tooling and automation strategies • Strong executive communication and influence skills, including presenting risk and compliance posture to executives, boards, auditors, and enterprise customers • Ability to operate effectively in ambiguity and prioritize competing business and risk requirements • Relevant certifications such as CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, CIPP, or CIPM are a plus