Director of Security GRC

Pax8, Inc; United States; Remote; USD 160,000 - 180,000; Full time

Benefits offered by this job

401(k) with Company Match

Medical, Dental & Vision Coverage

Employee Assistance Program (EAP)

Employer-Paid Life, AD&D, Short-Term &

Job summary

Pax8, Inc. in the United States seeks a Director of Security GRC to shape governance, risk, and compliance for a fast-moving, technology-led global business.

You will lead security policy, risk prioritisation, and program maturity to enable the business. You’ll partner across IT, engineering, legal, data, and HR to translate threats into practical improvements, measure control effectiveness, and drive intelligent risk decisions that strengthen Pax8’s security posture today and as technology

Qualifications

• Extensive experience leading IT security governance, risk, and compliance environments.
• Proven expertise across policy, exceptions, remediation, risk assessment, and prioritisation.
• Strong understanding of public cloud security and Zero Trust principles.
• Practical knowledge of frameworks such as NIST CSF, ISO 27001:2022, MITRE ATT&CK, SOC 2.
• Experience supporting incident management and response planning.

Responsibilities

• Set the standard for security governance with clear, practical policies and evolving standards.
• Turn exceptions into intelligent risk decisions, prioritising remediation and policy adherence.
• Make risk visible by measuring control effectiveness and guiding investments.
• Partner across IT, engineering, legal, data, HR and other teams to embed security in business processes.
• Develop people and capability within governance, risk, and compliance teams.

Skills

Security governance

Risk assessment

Policy & standards

Cloud security

Zero Trust

Security frameworks

Incident response planning

Education

Bachelor’s degree or equivalent experience

Job description

Pax8 is hiring a Director of Security GRC in the United States to shape how security governance, risk, and compliance protect and enable a fast-moving, technology-led global business. Build security that enables the business This is an opportunity to lead at the intersection of security, risk, technology, and business strategy.

You’ll strengthen the frameworks that help Pax8 make smart, risk-informed decisions, while evolving security governance for a world increasingly shaped by artificial intelligence, automation, cloud technology, and rapidly changing threats. You’ll have the scope to influence how we manage security policies, understand risk, measure control effectiveness, and continually mature our security program. You’ll also grow alongside new technology, helping us make thoughtful choices about automation and the tools that support our security strategy.

Work somewhere where technology and people matter Pax8 connects partners, vendors, and small to midsized businesses through technology, AI-powered insights, and comprehensive product support. Our global ecosystem includes more than 39,000 managed service providers and more than 130 vendors. Explore our US home and learn more about life and culture at Pax8.

What you’ll lead

• Set the standard for security governance, creating an environment where policies and standards are clear, practical, understood, and capable of evolving with the business.
• Turn exceptions into intelligent risk decisions, establishing a disciplined approach for evaluating deviations, prioritising remediation, and promoting policy adherence.
• Make risk visible, helping us understand control effectiveness and where investment can have the greatest impact on security maturity.
• Bring security into the way we work, partnering across information technology, engineering, legal, data, human resources, and other teams so security is considered throughout business processes.
• Use meaningful measures, establishing key performance and risk indicators that turn complex security activity into actionable insight for leaders and stakeholders.
• Advance security through technology, contributing to automation and tooling decisions that support our policies, standards, and risk objectives.
• Develop people and capability, providing guidance and direction to governance, risk, and compliance professionals while creating strong partnerships across the organisation.
• Keep us ready for what comes next, translating evolving threats and industry practices into practical improvements to our security program.

The impact you’ll make

You’ll help make security governance a business enabler. Your leadership will give teams greater clarity around risk, strengthen accountability for remediation, improve visibility of control effectiveness, and help Pax8 continuously mature its security program as the organisation and threat landscape evolve.

You’ll thrive here if you bring

• Extensive experience leading or operating within information technology security governance, risk, and compliance environments.
• Proven expertise across security policy, exceptions, remediation, risk assessment, and risk-based prioritisation.
• A strong understanding of public cloud security, including the risks and controls associated with cloud deployments.
• Practical understanding of Zero Trust security principles.
• Strong working knowledge of security frameworks and assurance approaches such as the National Institute of Standards and Technology Cybersecurity Framework, International Organization for Standardization 27001:2022, MITRE ATT&CK, and System and Organization Controls 2.
• Experience supporting incident management and response planning.
• The judgement to turn complex risk information into clear priorities and deliver meaningful security initiatives.
• Leadership and communication skills that enable you to bring technical and non-technical stakeholders together around shared outcomes.
• A related bachelor’s degree or equivalent professional experience.
• Risk and security certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, or Certified Information Systems Security Professional are welcomed.

This is a remote role requiring adequate secure and private internet service. Infrequent travel is expected.

Trust starts with how we hire

At Pax8, we care deeply about building genuine, trust based relationships — starting with how we hire. To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you’re applying as your authentic self, you have nothing to worry about — we’re excited to meet you. We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. More information is available in our Recruitment Privacy Notice. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process.

Bring your perspective

To fulfil this role, you must hold valid right to work in United States.

Total Rewards

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits: Salary $160-180k 401(k) with Company Match Medical, Dental & Vision Coverage Employee Assistance Program (EAP) Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance Flexible Open PTO Paid Sick Leave Paid Parental Leave RTD EcoPass (eligible Colorado-based employees)

What’s in it for you?

There's extensive room for a talented individual to grow at pace — whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level.

Why Pax8?

Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start-up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, it's business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life.

Background checks

As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). All checks are completed by our third-party provider, First Advantage. Once checks have been completed all candidates will receive a copy for their records.

Equal Opportunities

Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. Privacy notice: Pax8 Job Applicant Privacy Notice

Application Deadline - 11/10/2026