Director of Security GRC

Job description

Pax8 is hiring a Director of Security GRC in the United States to shape how security governance, risk, and compliance protect and enable a fast-moving, technology-led global business. 🚀 Build security that enables the business This is an opportunity to lead at the intersection of security, risk, technology, and business strategy . You’ll strengthen the frameworks that help Pax8 make smart, risk-informed decisions, while evolving security governance for a world increasingly shaped by artificial intelligence, automation, cloud technology, and rapidly changing threats. You’ll have the scope to influence how we manage security policies, understand risk, measure control effectiveness, and continually mature our security program. You’ll also grow alongside new technology, helping us make thoughtful choices about automation and the tools that support our security strategy. 💙 Work somewhere where technology and people matter Pax8 connects partners, vendors, and small to midsized businesses through technology, AI-powered insights, and comprehensive product support. Our global ecosystem includes more than 39,000 managed service providers and more than 130 vendors. Explore our US home and learn more about life and culture at Pax8 . 🛡️ What you’ll lead As our Director of Security GRC, you’ll: Set the standard for security governance , creating an environment where policies and standards are clear, practical, understood, and capable of evolving with the business. Turn exceptions into intelligent risk decisions , establishing a disciplined approach for evaluating deviations, prioritising remediation, and promoting policy adherence. Make risk visible , helping us understand control effectiveness and where investment can have the greatest impact on security maturity. Bring security into the way we work , partnering across information technology, engineering, legal, data, human resources, and other teams so security is considered throughout business processes. Use meaningful measures , establishing key performance and risk indicators that turn complex security activity into actionable insight for leaders and stakeholders. Advance security through technology , contributing to automation and tooling decisions that support our policies, standards, and risk objectives. Develop people and capability , providing guidance and direction to governance, risk, and compliance professionals while creating strong partnerships across the organisation. Keep us ready for what comes next , translating evolving threats and industry practices into practical improvements to our security program. 🎯 The impact you’ll make You’ll help make security governance a business enabler. Your leadership will give teams greater clarity around risk, strengthen accountability for remediation, improve visibility of control effectiveness, and help Pax8 continuously mature its security program as the organisation and threat landscape evolve. ⭐ You’ll thrive here if you bring Extensive experience leading or operating within information technology security governance, risk, and compliance environments. Proven expertise across security policy, exceptions, remediation, risk assessment, and risk-based prioritisation. A strong understanding of public cloud security , including the risks and controls associated with cloud deployments. Practical understanding of Zero Trust security principles. Strong working knowledge of security frameworks and assurance approaches such as the National Institute of Standards and Technology Cybersecurity Framework, International Organization for Standardization 27001:2022, MITRE ATT&CK, and System and Organization Controls 2 . Experience supporting incident management and response planning. The judgement to turn complex risk information into clear priorities and deliver meaningful security initiatives. Leadership and communication skills that enable you to bring technical and non-technical stakeholders together around shared outcomes. A related bachelor’s degree or equivalent professional experience. Risk and security certifications such as Certified Information Systems Auditor, Certified in Risk and Information Systems Control, or Certified Information Systems Security Professional are welcomed. This is a remote role requiring adequate secure and private internet service. Infrequent travel is expected. 🤝 Trust starts with how we hire At Pax8, we care deeply about building genuine, trust based relationships — starting with how we hire. To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you're applying as your authentic self, you have nothing to worry about — we're excited to meet you. We also use thoughtfully applied AI-enabled tools to support our hiring process. These tools may assist with tasks such as reviewing or prioritising applications, but hiring decisions are made by our people. More information is available in our Recruitment Privacy Notice. If you have questions about how we hire or would prefer not to have your application supported by these tools, you can opt out at any part of our process. 🌎 Bring your perspective We encourage you to apply even if you don't meet 100% of the criteria. We're committed to diverse perspectives, inclusive hiring and sharing your transferrable skills. To fulfil this role, you must hold valid right to work in United States. 💰 Total Rewards At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits: Salary $160-180k 401(k) with Company Match Medical, Dental & Vision Coverage Employee Assistance Program (EAP) Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance Flexible Open PTO Paid Sick Leave Paid Parental Leave RTD EcoPass (eligible Colorado-based employees) 🌱 What’s in it for you? There's extensive room for a talented individual to grow at pace — whether that's advancing quickly in this role or exploring one of the many opportunities across our global organisation. You'll have access to our internal development hub designed to accelerate your skills and stretch your potential. Alongside specialist Learning & Development trainers, you'll also tap into AI powered tools, "born in the cloud" mentors, and cross continent collaboration that broaden your perspective and sharpen your expertise. We'll give you the space, trust, and the right projects to help you thrive — and full visibility of what it takes to reach your next level. ☁️ Why Pax8? Our mission is to build the managed intelligence marketplace and empower small businesses to do more with smarter technology. We are a fast-growing, dynamic, and high-energy organisation with a start-up feel, allowing you to make a meaningful impact on the business. Culture is also important to us, and at Pax8, it's business, and it IS personal. We are passionate, creative, and unconventional. We work hard, keep it fun, and expect the best! We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life. 🔎 Background checks As part of our hiring process, we are required to undertake pre-employment checks on all candidates that are successful in their application with Pax8. As part of these checks Pax8 will request ID verification, reference requests and qualification checks (additional checks may be completed for certain countries, such as criminal and financial). All checks are completed by our third-party provider, First Advantage. Once checks have been completed all candidates will receive a copy for their records. 💙 Equal Opportunities Pax8 are an equal opportunities employer and welcome individuals who are in possession of the appropriate requirements to work within the country you have applied for. Offered individuals will be asked to undertake identity, security compliance and reference checks. Your privacy is important to us. Your data will be held in accordance with local best practices and processed only in accordance with our recruiting processes. Privacy notice: Pax8 Job Applicant Privacy Notice Application Deadline - 11/10/2026 At Pax8, we care deeply about building genuine, trust‑based relationships — starting with how we hire. To protect our business, our teams, and our customers, we use a range of measures throughout the recruitment process to help confirm authenticity and prevent fraud. These safeguards are designed to be fair, respectful, and proportionate, and may evolve as risks change. By applying, you acknowledge that we take steps to verify identity and representation during hiring. If you’re applying as your authentic self, you have nothing to worry about — we’re excited to meet you. Perks: At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits: 401(k) with Company Match Medical, Dental & Vision Coverage Employee Assistance Program (EAP) Employer-Paid Life, AD&D, Short-Term Disability & Long-Term Disability Insurance Flexible Open PTO Paid Sick Leave Paid Parental Leave RTD EcoPass (eligible Colorado-based employees) Please take a moment to review our Proprietary Rights and Non-Competition Agreement — this document outlines important information about your rights and responsibilities if you join our team. Job Applicant Privacy Notice