Director, Governance, Risk & Compliance
Doppel · Remote · US Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Director level role
- Fully remote
- GRC strategy leader
- SOC 2 & ISO ownership
- AI governance focus
You will define the multi-year roadmap for governance, risk, compliance, and privacy at Doppel. This leadership position requires building a high-performing team and establishing operating models that support business growth while managing regulatory complexity.
As a strategic advisor to the CISO and executive leadership, you will oversee SOC 2, ISO standards, and AI governance. You will partner with cross-functional teams to embed effective risk management into company operations without creating friction.
What you'll do
- Define and execute the multi-year GRC strategy, operating model, and roadmap
- Build, hire, and develop a high-performing GRC team with clear career paths
- Own executive accountability for SOC 2 Type II, ISO 27001, and ISO 27701
- Establish enterprise risk management frameworks including risk appetite and assessment
- Scale control assurance programs across ISO, SOC 2, NIST, and privacy requirements
- Govern vendor, partner, and AI-related risks through due diligence and monitoring
- Lead customer trust strategies including security reviews and RFP support
- Partner with Legal and Product to shape privacy and responsible AI governance
- Provide executive oversight for incident preparedness and business continuity
- Report decision-oriented risk and compliance updates to leadership and the board
What you'll need
- 10+ years experience in GRC, security risk, compliance, or security audit
- Proven track record leading teams and scaling GRC functions in tech or SaaS
- Experience advising senior executives on security and regulatory business decisions
- Executive ownership of SOC 2 Type II and ISO 27001 certification cycles
- Deep knowledge of ISMS, PIMS, AIMS, and Trust Services Criteria
- Experience designing enterprise risk management programs and governance forums
- Background in third-party risk, access governance, and customer security assurance
- Ability to develop GRC tooling and automation strategies to reduce manual work
- Strong communication skills for presenting to boards, auditors, and customers
- Comfort operating in ambiguity and prioritizing in a rapidly scaling environment
Nice to have
- Experience with ISO 42001 or comparable AI governance programs
- Certifications such as CISA, CISSP, CISM, CRISC, or CIPP
- ISO 27001 Lead Auditor or Implementer credentials
Stack
- SOC 2
- ISO 27001
- ISO 27701
- ISO 42001
- NIST