Director, GRC & Enterprise Risk Leadership

Doppel Farmaceutici S.r.l.; United States; On-site; USD 180,000 - 280,000; Full time

Job summary

Doppel is seeking a Director of Governance, Risk & Compliance to lead and scale its GRC function as the company grows. You will set the company-wide strategy, operating model, and multi-year roadmap for governance, risk, compliance, privacy, third-party risk, control assurance, and customer trust.

You will own the strategy for SOC 2, ISO 27001, ISO 27701, ISO 42001, and future frameworks while building the systems and governance structure to operate them efficiently at scale.

Qualifications

• 10+ years of experience across GRC, security risk, compliance, or related disciplines, including leading teams.
• Experience building and scaling GRC programs in high-growth tech or SaaS environments.
• Ability to translate risk and regulatory concerns into business decisions for executives.
• Experience directing SOC 2 Type II and ISO 27001 programs across multiple cycles.

Responsibilities

• Define and execute Doppel's multi-year GRC strategy, operating model, and roadmap.
• Build, lead, and grow a high-performing GRC team with clear accountability.
• Own compliance strategy and certification efforts (SOC 2, ISO 27001, ISO 27701, ISO 42001).
• Lead enterprise risk governance including risk assessment, appetite, and remediation.
• Scale control assurance and security governance across frameworks and regulatory requirements.
• Own third-party and emerging risk strategy including due diligence and monitoring.
• Lead customer trust strategy with enterprise security reviews and RFP support.
• Shape privacy and AI governance with Legal, Product, Engineering, and Security.
• Strengthen organizational resilience with incident response, continuity, and recovery planning.
• Advise executives and the board with clear risk and compliance reporting.

Skills

GRC leadership

Security risk management

Compliance programs

Executive stakeholder management

Job description

Doppel is seeking a Director of Governance, Risk & Compliance to lead and scale its GRC function as the company grows. You will set the company-wide strategy, operating model, and multi-year roadmap for governance, risk, compliance, privacy, third-party risk, control assurance, and customer trust.

You will own the strategy for SOC 2, ISO 27001, ISO 27701, ISO 42001, and future frameworks while building the systems and governance structure to operate them efficiently at scale.