Director of Security GRC

Pax8, Inc.; Denver (CO); Remote; USD 160,000 - 180,000; Full time

Benefits offered by this job

401(k) with Company Match

Medical, Dental & Vision Coverage

Employee Assistance Program (EAP)

Employer-Paid Life, AD&D, Short-Term &

Long-Term Disability Insurance

Job summary

Pax8 is seeking a Director of Security GRC in the United States to shape governance, risk, and compliance for a fast-moving tech company.

Lead policy, risk assessment, control maturity, and collaboration across IT, legal, data, HR, and engineering to integrate security into business processes and drive KPIs. Build automation and tooling to evolve the program for AI and cloud environments.

Qualifications

• Extensive experience leading IT security governance, risk, and compliance.
• Strong knowledge of security policies, exceptions, remediation, and prioritization.
• Deep understanding of cloud security risks and controls.
• Practical understanding of Zero Trust security principles.
• Familiarity with NIST CSF, ISO 27001:2022, MITRE ATT&CK, SOC 2.
• Incident management and response planning experience.
• Ability to turn risk information into priorities and initiatives.
• Leadership and cross-functional collaboration skills.
• Bachelor’s degree or equivalent.
• Certifications in information security welcomed.

Responsibilities

• Set the standard for security governance and policy, adaptable to business changes.
• Turn exceptions into intelligent risk decisions and remediation prioritization.
• Make risk visible by measuring control effectiveness.
• Collaborate across IT, engineering, legal, data, HR to embed security in processes.
• Define KPIs and risk indicators to translate activity into insight.
• Drive security through automation and tooling decisions.
• Develop governance, risk, and compliance capabilities across the organization.
• Translate evolving threats into practical program improvements.

Skills

Security governance

Risk management

Policy development

Zero Trust

Cloud security

Incident management

Leadership & communication

Bachelor’s degree or equivalent

Security certifications (welcomed)

Education

Bachelor’s degree or equivalent professional experience

CISA

CRISC

CISSP

Job description

Pax8 is hiring a Director of Security GRC in the United States to shape how security governance, risk, and compliance protect and enable a fast-moving, technology-led global business.

Build security that enables the business

This is an opportunity to lead at the intersection of security, risk, technology, and business strategy. You’ll strengthen the frameworks that help Pax8 make smart, risk-informed decisions, while evolving security governance for a world increasingly shaped by artificial intelligence, automation, cloud technology, and rapidly changing threats.

You’ll have the scope to influence how we manage security policies, understand risk, measure control effectiveness, and continually mature our security program. You’ll also grow alongside new technology, helping us make thoughtful choices about automation and the tools that support our security strategy.

Work somewhere where technology and people matter

Pax8 connects partners, vendors, and small to midsized businesses through technology, AI-powered insights, and comprehensive product support. Our global ecosystem includes more than 39,000 managed service providers and more than 130 vendors.

Explore our US home and learn more about life and culture at Pax8.

What you’ll lead

As Our Director Of Security GRC, You’ll

• Set the standard for security governance, creating an environment where policies and standards are clear, practical, understood, and capable of evolving with the business.
• Turn exceptions into intelligent risk decisions, establishing a disciplined approach for evaluating deviations, prioritising remediation, and promoting policy adherence.
• Make risk visible, helping us understand control effectiveness and where investment can have the greatest impact on security maturity.
• Bring security into the way we work, partnering across information technology, engineering, legal, data, human resources, and other teams so security is considered throughout business processes.
• Use meaningful measures, establishing key performance and risk indicators that turn complex security activity into actionable insight for leaders and stakeholders.
• Advance security through technology, contributing to automation and tooling decisions that support our policies, standards, and risk objectives.
• Develop people and capability, providing guidance and direction to governance, risk, and compliance professionals while creating strong partnerships across the organisation.
• Keep us ready for what comes next, translating evolving threats and industry practices into practical improvements to our security program.

The impact you’ll make

You’ll help make security governance a business enabler. Your leadership will give teams greater clarity around risk, strengthen accountability for remediation, improve visibility of control effectiveness, and help Pax8 continuously mature its security program as the organisation and threat landscape evolve.

You’ll thrive here if you bring

• Extensive experience leading or operating within information technology security governance, risk, and compliance environments.
• Proven expertise across security policy, exceptions, remediation, risk assessment, and risk-based prioritisation.
• A strong understanding of public cloud security, including the risks and controls associated with cloud deployments.
• Practical understanding of Zero Trust security principles.
• Strong working knowledge of security frameworks and assurance approaches such as the National Institute of Standards and Technology Cybersecurity Framework, International Organization for Standardization 27001:2022, MITRE ATT&CK, and System and Organization Controls 2.
• Experience supporting incident management and response planning.
• The judgement to turn complex risk information into clear priorities and deliver meaningful security initiatives.
• Leadership and communication skills that enable you to bring technical and non-technical stakeholders together around shared outcomes.
• A related bachelor’s degree or equivalent professional experience.
• Risk and security certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, or Certified Information Systems Security Professional are welcomed.

This is a remote role requiring adequate secure and private internet service. Infrequent travel is expected.

Trust starts with how we hire

At Pax8, we care deeply about building genuine, trust based relationships — starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you're applying as your authentic self, you have nothing to worry about — we're excited to meet you.

We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. More information is available in our Recruitment Privacy Notice. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process.

Bring your perspective

We encourage you to apply even if you don't meet 100% of the criteria. We're committed to diverse perspectives, inclusive hiring and sharing your transferrable skills. To fulfil this role, you must hold valid right to work in United States.

Total Rewards

Benefits At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:

• Salary $160-180k
• 401(k) with Company Match
• Medical, Dental & Vision Coverage
• Employee Assistance Program (EAP)
• Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
• Flexible Open PTO
• Paid Sick Leave
• Paid Parental Leave
• RTD EcoPass (eligible Colorado-based employees)

What’s in it for you?

There's extensive room for a talented individual to grow at pace — whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level.

Why Pax8?

Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start‑up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, it's business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life.

Background checks

As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). All checks are completed by our third-party provider, First Advantage. Once checks have been completed all candidates will receive a copy for their records.

Equal Opportunities

Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. Privacy notice: Pax8 Job Applicant Privacy Notice

Application Deadline - 11/10/2026

At Pax8, we care deeply about building genuine, trust‑based relationships — starting with how we hire.

To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change.

By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you’re applying as your authentic self, you have nothing to worry about — we’re excited to meet you.

Perks

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:

• 401(k) with Company Match
• Medical, Dental & Vision Coverage
• Employee Assistance Program (EAP)
• Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance
• Flexible Open PTO
• Paid Sick Leave
• Paid Parental Leave