Head of Enterprise Risk & GRC

AppFolio; Santa Barbara (CA); Hybrid; USD 184,000 - 230,000; Full time

Job summary

AppFolio is seeking a Senior Enterprise Risk Manager to mature and scale its ERM program in partnership with senior leaders and cross-functional stakeholders. You will lead the Technology Compliance team and embed risk-informed decision making across the org.

Based in San Diego or Santa Barbara, this full-time role offers a hybrid work model and a compensation range of $184k–$230k base pay, plus benefits. You will create real-time risk signals, report to leadership and align with the ERC and

Qualifications

• Extensive experience in enterprise risk management, GRC, internal audit, or a related second-line function.
• Proven leadership, building and developing teams with IDPs and succession planning.
• Strong command of COSO ERM and the three-lines-of-defense framework.
• Ability to influence senior leaders and communicate risk to executive and Board-level audiences.
• Experience partnering with first-line functions like R&D, Product, or Engineering to embed risk-aware decisions.

Responsibilities

• Mature and integrate AppFolio’s ERM framework and program in partnership with senior leaders and cross-functional stakeholders, and support the Enterprise Risk Committee (ERC) that administers the program.
• Build a new Risk Analysis capability for coordinating risk identification, assessment, and monitoring activities across the business.
• Lead the Technology Compliance team — owning compliance policies, ongoing monitoring, and audit readiness across SOX and SOC reviews, and supporting a Common Controls Framework (CCF).
• Stand up a continuous, rolling risk-identification cadence that surfaces and escalates emerging risks in real time, complementing the annual enterprise risk assessment and the quarterly ERC and RCOC cycles.
• Partner with and enable first-line functions — including R&D (Product and Engineering) — embedding risk-informed decision-making into their workflows so risk is a natural, owned part of moving quickly.
• Assist management with risk-related reporting to the Board, and communicate ERM program updates to the Risk & Compliance Oversight Committee (RCOC).
• Advance the three-lines-of-defense model and the broader GRC strategy, aligning ERM activity, cadence, and Top Risks with the company’s operating model and OKRs.

Skills

ERM experience

GRC

Internal audit

COSO ERM

SOX ITGCs

SOC 1/2

Executive comms

Stakeholder mgmt

Auditor liaison

R&D partnership

Data-driven monitoring

Job description

AppFolio is seeking a Senior Enterprise Risk Manager to mature and scale its ERM program in partnership with senior leaders and cross-functional stakeholders. You will lead the Technology Compliance team and embed risk-informed decision making across the org.

Based in San Diego or Santa Barbara, this full-time role offers a hybrid work model and a compensation range of $184k–$230k base pay, plus benefits. You will create real-time risk signals, report to leadership and align with the ERC and