Director, Enterprise Risk

AppFolio; Santa Barbara (CA); Hybrid; USD 184,000 - 230,000; Full time

Job summary

AppFolio is seeking a Senior Enterprise Risk Manager to mature and scale its ERM program in partnership with senior leaders and cross-functional stakeholders. You will lead the Technology Compliance team and embed risk-informed decision making across the org.

Based in San Diego or Santa Barbara, this full-time role offers a hybrid work model and a compensation range of $184k–$230k base pay, plus benefits. You will create real-time risk signals, report to leadership and align with the ERC and

Qualifications

• Extensive experience in enterprise risk management, GRC, internal audit, or a related second-line function.
• Proven leadership, building and developing teams with IDPs and succession planning.
• Strong command of COSO ERM and the three-lines-of-defense framework.
• Ability to influence senior leaders and communicate risk to executive and Board-level audiences.
• Experience partnering with first-line functions like R&D, Product, or Engineering to embed risk-aware decisions.

Responsibilities

• Mature and integrate AppFolio’s ERM framework and program in partnership with senior leaders and cross-functional stakeholders, and support the Enterprise Risk Committee (ERC) that administers the program.
• Build a new Risk Analysis capability for coordinating risk identification, assessment, and monitoring activities across the business.
• Lead the Technology Compliance team — owning compliance policies, ongoing monitoring, and audit readiness across SOX and SOC reviews, and supporting a Common Controls Framework (CCF).
• Stand up a continuous, rolling risk-identification cadence that surfaces and escalates emerging risks in real time, complementing the annual enterprise risk assessment and the quarterly ERC and RCOC cycles.
• Partner with and enable first-line functions — including R&D (Product and Engineering) — embedding risk-informed decision-making into their workflows so risk is a natural, owned part of moving quickly.
• Assist management with risk-related reporting to the Board, and communicate ERM program updates to the Risk & Compliance Oversight Committee (RCOC).
• Advance the three-lines-of-defense model and the broader GRC strategy, aligning ERM activity, cadence, and Top Risks with the company’s operating model and OKRs.

Skills

ERM experience

GRC

Internal audit

COSO ERM

SOX ITGCs

SOC 1/2

Executive comms

Stakeholder mgmt

Auditor liaison

R&D partnership

Data-driven monitoring

Job description

AppFolio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good. Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.

AppFolio is more than a company. We’re a community of dreamers, big thinkers, problem solvers, active listeners, and multipliers. At every opportunity, we set the pace while delivering innovation built to carry real estate into the future. One in which every experience feels effortless, yet meaningful. Where customers are empowered to take on any opportunity. We show up as one team, connected by our values to be a force for good. Because together, we have the power to create extraordinary outcomes for our customers, our communities, and ourselves.

Your impact

• Mature and integrate AppFolio’s ERM framework and program in partnership with senior leaders and cross-functional stakeholders, and support the Enterprise Risk Committee (ERC) that administers the program.
• Build a new Risk Analysis capability for coordinating risk identification, assessment, and monitoring activities across the business.
• Lead the Technology Compliance team — owning compliance policies, ongoing monitoring, and audit readiness across SOX and SOC reviews, and supporting a Common Controls Framework (CCF).
• Stand up a continuous, rolling risk-identification cadence that surfaces and escalates emerging risks in real time, complementing the annual enterprise risk assessment and the quarterly ERC and RCOC cycles.
• Partner with and enable first-line functions — including R&D (Product and Engineering) — embedding risk-informed decision-making into their workflows so risk is a natural, owned part of moving quickly.
• Assist management with risk-related reporting to the Board, and communicate ERM program updates to the Risk & Compliance Oversight Committee (RCOC).
• Advance the three-lines-of-defense model and the broader GRC strategy, aligning ERM activity, cadence, and Top Risks with the company’s operating model and OKRs.

Qualifications

• Extensive experience in enterprise risk management, GRC, internal audit, or a closely related second-line function, including maturing or scaling an ERM program.
• A track record of building and leading teams, developing talent through individual development plans (IDPs), and planning succession for key roles.
• Strong command of enterprise risk frameworks and the three-lines-of-defense model (e.g., COSO ERM), plus working knowledge of technology compliance domains such as SOX ITGCs and SOC 1 / SOC 2.
• Demonstrated ability to influence senior leaders and to communicate risk clearly to executive and Board-level audiences, including audit or risk committees.
• Experience partnering with first-line functions — ideally R&D, Product, or Engineering — to embed risk-informed decision-making without slowing the business.
• A data-driven approach to risk monitoring, including defining risk metrics and enhancing monitoring and reporting capabilities.
• Relevant professional certifications are a plus (e.g., CRISC, CRMA, CISA, CPA, or CISSP).

Must have

• 5+ years of progressive experience in enterprise risk management, internal audit, GRC, or technology compliance, including direct people-leadership experience.
• Deep, hands-on understanding of enterprise risk frameworks and the three-lines-of-defense model, with experience operating or maturing an ERM program.
• Proven ownership of technology compliance and audit readiness (SOX and/or SOC), including serving as a primary liaison to internal and external auditors.
• Excellent executive communication and stakeholder-management skills, with experience reporting to senior leadership and/or a Board committee.

Location

This position is based in our San Diego, CA, or our Santa Barbara office. Find out more about our locations by visiting our site.

All late-stage candidates complete an in-person meeting with an AppFolian as part of our hiring process.

Compensation & Benefits

The compensation that we reasonably expect to pay for this role is: $184,000 - $230,000 base pay. The actual compensation for this role will be determined by a variety of factors, including but not limited to the candidate’s skills, education, experience, and internal equity.

Please note that compensation is just one aspect of a comprehensive Total Rewards package. The compensation range listed here does not include additional benefits or any discretionary bonuses you may be eligible for based on your role and/or employment type.

Regular full-time employees are eligible for benefits - see here.

About AppFolio

AppFolio is the technology leader powering the future of the real estate industry. Our innovative platform and trusted partnership enable our customers to connect communities, increase operational efficiency, and grow their business. For more information about AppFolio, visit appfolio.com.

Why AppFolio

Grow

We enable a culture of high performance, where delivering results is recognized by opportunities for growth and compelling total rewards. Our challenging and meaningful work drive the growth of our business, and ourselves.

Learn

We partner with you to realize your potential by investing in you from the start. We're cultivating a team of big thinkers through coaching and mentorship with our best-in-class leaders, and giving you the time and tools to develop your skills.

Impact

We are creating a world where living in, investing in, managing, and supporting communities feels magical and effortless, freeing people to thrive. We do this by innovating with purpose while cultivating a culture of impact. We learn as much from each other as we do our customers and our communities.

Connect

We excel at hybrid work by fostering an environment that feels flexible, personal and connected, no matter where we are. We create space to fuel innovation and collaboration, and we come together to celebrate, connect, and succeed.

Paddle as One.

Learn more at appfolio.com/company/careers

Statement of Equal Opportunity

At AppFolio, we value diversity in backgrounds and perspectives and depend on it to drive our innovative culture. That’s why we’re a proud Equal Opportunity Employer, and we believe that our products, our teams, and our business are stronger because of it. This means that no matter what race, color, religion, sex, sexual orientation, gender identification, national origin, age, marital status, ancestry, physical or mental disability, or veteran status, you’re always welcome at AppFolio.