Director, Enterprise Risk & Tech Compliance

AppFolio; San Diego (CA); On-site; USD 184,000 - 230,000; Full time

Job summary

AppFolio is seeking a Director, Enterprise Risk to mature and integrate our ERM framework, lead the Technology Compliance function, and build a new Risk Analysis capability. You will partner with first‑line teams to accelerate risk‑informed decisions across the business.

The role reports to senior leadership, supports the ERC and RCOC, and drives the three‑lines‑of‑defense strategy while aligning with OKRs. Based in San Diego or Santa Barbara, CA.

Qualifications

• 5+ years of progressive experience in enterprise risk management, internal audit, GRC, or technology compliance, including direct people‑leadership experience.
• Deep, hands‑on understanding of enterprise risk frameworks and the three-lines-of-defense model, with experience operating or maturing an ERM program.
• Proven ownership of technology compliance and audit readiness (SOX and/or SOC), including serving as a primary liaison to internal and external auditors.
• Excellent executive communication and stakeholder-management skills, with experience reporting to senior leadership and/or a Board committee.

Responsibilities

• Mature and integrate AppFolio’s ERM framework and program in partnership with senior leaders and cross-functional stakeholders, and support the Enterprise Risk Committee (ERC) that administers the program.
• Build a new Risk Analysis capability for coordinating risk identification, assessment, and monitoring activities across the business.
• Lead the Technology Compliance team — owning compliance policies, ongoing monitoring, and audit readiness across SOX and SOC reviews, and supporting a Common Controls Framework (CCF).
• Stand up a continuous, rolling risk-identification cadence that surfaces and escalates emerging risks in real time, complementing the annual enterprise risk assessment and the quarterly ERC and RCOC cycles.
• Partner with and enable first-line functions — including R&D (Product and Engineering) — embedding risk-informed decision-making into their workflows so risk is a natural, owned part of moving quickly.
• Assist management with risk-related reporting to the Board, and communicate ERM program updates to the Risk & Compliance Oversight Committee (RCOC).
• Advance the three-lines-of-defense model and the broader GRC strategy, aligning ERM activity, cadence, and Top Risks with the company’s operating model and OKRs.

Skills

ERM

GRC

Three lines of defense

Executive communication

Stakeholder mgmt

Audit liaison

SOX SOC knowledge

Job description

AppFolio is seeking a Director, Enterprise Risk to mature and integrate our ERM framework, lead the Technology Compliance function, and build a new Risk Analysis capability. You will partner with first‑line teams to accelerate risk‑informed decisions across the business.

The role reports to senior leadership, supports the ERC and RCOC, and drives the three‑lines‑of‑defense strategy while aligning with OKRs. Based in San Diego or Santa Barbara, CA.