Space GRC Director — Risk, Compliance & Audits

Apex Technology, Inc.; Los Angeles (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity in Apex

Company-paid healthcare

PTO 15–20 days + holidays

401(k) matching

Parental leave

Lunch and snacks

Office Playa Vista

Career development opportunities

Job summary

Apex Technology, Inc. is seeking a Director, Governance, Risk & Compliance to own and scale the GRC program across the company.

You will lead a small team including ISSO/ISSM, set priorities, and ensure continuous authorization and evidence for regulatory frameworks. You will collaborate with Legal, IT, Engineering, and program teams to align NIST, FedRAMP, SOC 2, ISO 27001, ITAR/EAR, GDPR/CCPA requirements into a single, maintainable program that supports Apex's growth and customers in

Qualifications

• 8+ years in governance, risk, and compliance, information security.
• Experience leading and mentoring security staff.
• Deep knowledge of NIST SP 800-171 and NIST CSF/800-53; with CMMC and/or FedRAMP experience.
• Proven ownership of commercial security certifications — SOC 2 and/or ISO 27001.
• Familiarity with export control (ITAR/EAR) and data privacy obligations (GDPR/CCPA).
• Proven ability to manage audits and assessments end to end and build evidence.
• Strong cross-functional communication between regulators, auditors, engineers, and executives.
• U.S. Person status is required.

Responsibilities

• Own GRC program end to end, establishing and maintaining control frameworks, policies, standards, and procedures.
• Lead, manage, and mentor the GRC team; set priorities and grow capabilities as the program scales.
• Drive compliance against government and defense requirements — NIST SP 800-171, CMMC, FedRAMP; SSP and POA&M development, control implementation, and audits.
• Own the SOC 2 Type II and ISO 27001 roadmap; manage scoping, evidence collection, and audits.
• Partner with Legal and Trade Compliance on ITAR/EAR and with Privacy on GDPR/CCPA obligations.
• Build and run the enterprise risk management process and report residual risk to leadership.
• Manage the full audit and assessment lifecycle; be primary point of contact for evidence and corrective actions.
• Establish a centralized control framework to satisfy multiple regulatory obligations.
• Run vendor and third-party risk programs; assess suppliers against Apex's security requirements.
• Deliver decision-ready reporting on compliance status, risk posture, and audit outcomes.

Skills

GRC leadership

Team management

NIST SP 800-171

CMMC knowledge

Security audits

SOC 2 knowledge

ISO 27001 knowledge

Export controls (ITAR/EAR)

GDPR/CCPA knowledge

Cross-functional communication

U.S. Person status

Education

J.D. or MPP degree

Job description

Apex Technology, Inc. is seeking a Director, Governance, Risk & Compliance to own and scale the GRC program across the company.

You will lead a small team including ISSO/ISSM, set priorities, and ensure continuous authorization and evidence for regulatory frameworks. You will collaborate with Legal, IT, Engineering, and program teams to align NIST, FedRAMP, SOC 2, ISO 27001, ITAR/EAR, GDPR/CCPA requirements into a single, maintainable program that supports Apex's growth and customers in