Director of GRC & Compliance for Space Innovation

Speedrun Talent Network; Los Angeles (CA); Sur place; USD 150 000 - 230 000; Plein temps

Avantages offerts par ce poste

Shared equity incentives

Comprehensive health care

PTO starting at 15 days, 20+ with time

401(k) retirement plan with matching

Parental leave (8 weeks)

Daily catered lunch and snacks

Playa Vista office

Career development opportunities

Résumé du poste

Apex Technology, Inc. is seeking a Director, Governance, Risk & Compliance (GRC) to own the program end-to-end. You will lead a team including an ISSO and ISSM, aligning security, legal, IT and engineering to ensure ongoing compliance across NIST, ITAR/EAR, SOC 2, ISO 27001.

This on-site role reports to the Director of Cybersecurity and will drive enterprise risk management, audits, and remediation efforts in a fast-growing aerospace manufacturing environment.

Qualifications

• 8+ years in GRC or security compliance, owning a program.
• Experience leading security/compliance staff and direct reports.
• Hands-on knowledge of NIST SP 800-171 and 800-53.
• Experience with CMMC and/or FedRAMP authorization.
• Ownership of commercial certifications like SOC 2 and ISO 27001.
• Familiarity with export controls ITAR/EAR and privacy GDPR/CCPA.
• Proven ability to manage audits end-to-end with documentation.
• Strong cross-functional communication with regulators, auditors, engineers, and executives.
• U.S. Person status required.

Responsabilités

• Own Apex's GRC program end to end, establish and maintain control frameworks, policies, standards.
• Lead and mentor the GRC team; manage ISSO and ISSM.
• Drive compliance against NIST, CMMC, FedRAMP; develop SSP/POA&M.
• Own commercial security certifications SOC 2 Type II and ISO 27001.
• Partner with Legal, Trade Compliance on ITAR/EAR and GDPR/CCPA.
• Build enterprise risk management and maintain risk register.
• Manage the audit and assessment lifecycle with evidence and corrective actions.
• Establish a centralized control framework to de-duplicate obligations.
• Run vendor/ third-party risk program.
• Deliver decision-ready reporting to leadership on compliance status and risk.

Connaissances

GRC leadership

Regulatory frameworks

Audit management

Vendor risk management

Cross-functional collaboration

Information security governance

Formation

Bachelor's degree in a related field

J.D. law degree

Master's degree in public policy

Outils

GRC tooling

Automated evidence collection platforms

Description du poste

Apex Technology, Inc. is seeking a Director, Governance, Risk & Compliance (GRC) to own the program end-to-end. You will lead a team including an ISSO and ISSM, aligning security, legal, IT and engineering to ensure ongoing compliance across NIST, ITAR/EAR, SOC 2, ISO 27001.

This on-site role reports to the Director of Cybersecurity and will drive enterprise risk management, audits, and remediation efforts in a fast-growing aerospace manufacturing environment.