Director, Enterprise Risk & Tech Compliance

AppFolio; Denver (CO); On-site; USD 184,000 - 230,000; Full time

Job summary

AppFolio is seeking a Director of Enterprise Risk to mature and integrate its ERM framework, lead the Technology Compliance function, and establish a new Risk Analysis capability. You will partner with senior leaders and first-line teams, embedding risk-informed decision-making across R&D, Product, and Engineering.

Based in San Diego or Santa Barbara, you will drive risk reporting to the Board, advance the three-lines-of-defense model, and help align ERM with OKRs while ensuring audit readiness

Qualifications

• 5+ years in enterprise risk management, internal audit, GRC, or technology compliance, including direct people-leadership experience.
• Deep, hands-on understanding of enterprise risk frameworks and the three-lines-of-defense model, with experience operating or maturing an ERM program.
• Proven ownership of technology compliance and audit readiness (SOX and/or SOC), including serving as a primary liaison to internal and external auditors.
• Excellent executive communication and stakeholder-management skills, with experience reporting to senior leadership and/or a Board committee.

Responsibilities

• Mature and integrate AppFolio’s ERM framework and program in partnership with senior leaders and cross-functional stakeholders, and support the Enterprise Risk Committee (ERC) that administers the program.
• Build a new Risk Analysis capability for coordinating risk identification, assessment, and monitoring activities across the business.
• Lead the Technology Compliance team — owning compliance policies, ongoing monitoring, and audit readiness across SOX and SOC reviews, and supporting a Common Controls Framework (CCF).
• Stand up a continuous, rolling risk-identification cadence that surfaces and escalates emerging risks in real time, complementing the annual enterprise risk assessment and the quarterly ERC and RCOC cycles.
• Partner with and enable first-line functions — including R&D (Product and Engineering) — embedding risk-informed decision-making into their workflows so risk is a natural, owned part of moving quickly.
• Assist management with risk-related reporting to the Board, and communicate ERM program updates to the Risk & Compliance Oversight Committee (RCOC).
• Advance the three-lines-of-defense model and the broader GRC strategy, aligning ERM activity, cadence, and Top Risks with the company’s operating model and OKRs.

Skills

ERM leadership

GRC & internal audit

SOX/SOC compliance

Executive communication

R&D collaboration

Risk metrics

Three-lines-of-defense

Certifications (CRISC/CRMA/CISA/CPA/Cy

Stakeholder management

Tools

COSO ERM

SOX ITGCs

SOC 1/SOC 2

Job description

AppFolio is seeking a Director of Enterprise Risk to mature and integrate its ERM framework, lead the Technology Compliance function, and establish a new Risk Analysis capability. You will partner with senior leaders and first-line teams, embedding risk-informed decision-making across R&D, Product, and Engineering.

Based in San Diego or Santa Barbara, you will drive risk reporting to the Board, advance the three-lines-of-defense model, and help align ERM with OKRs while ensuring audit readiness