Chief GRC & Enterprise Risk Strategist

Wilco; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Doppel is seeking a Director of Governance, Risk & Compliance to lead and scale the GRC function as the company grows. You will set strategy, operating model, and a multi-year roadmap for governance, risk, compliance, privacy, third-party risk, control assurance, and customer trust.

You will own the strategy for SOC 2, ISO 27001, ISO 27701, ISO 42001, and related programs while building teams, processes, and governance to operate them at scale.

Qualifications

• 10+ years of experience across GRC, security risk, compliance, security audit, or related disciplines.
• Experience building and scaling GRC programs and teams in high-growth tech environments.
• Executive ownership of SOC 2 Type II and ISO 27001 with audit management.
• Strong communication and influence with executives, boards, auditors, and customers.
• Ability to operate in ambiguity and build scalable governance systems.

Responsibilities

• Set and execute Doppel's multi-year GRC strategy, operating model, and roadmap.
• Build and lead a high-performing GRC team with clear accountability.
• Own compliance strategy for SOC 2, ISO 27001, ISO 27701, ISO 42001 and future frameworks.
• Lead enterprise risk governance including risk appetite and escalation.
• Scale control assurance across ISO, SOC 2, NIST, privacy, and vendor risk.
• Oversee third-party risk, privacy, and AI governance with efficient processes.
• Guide customer trust initiatives and collaborate with Sales and Success.
• Advise executives and the board with clear risk and compliance reporting.

Skills

GRC leadership

SOC 2

ISO 27001

Executive stakeholder management

Risk management

Regulatory compliance

Audit management

Vendor risk

Strategic planning

Education

CISA

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

Tools

GRC tooling

Job description

Doppel is seeking a Director of Governance, Risk & Compliance to lead and scale the GRC function as the company grows. You will set strategy, operating model, and a multi-year roadmap for governance, risk, compliance, privacy, third-party risk, control assurance, and customer trust.

You will own the strategy for SOC 2, ISO 27001, ISO 27701, ISO 42001, and related programs while building teams, processes, and governance to operate them at scale.