Director, Governance, Risk, and Compliance

Job Overview:

We are seeking a highly motivated and experienced Director of Governance, Risk, and Compliance (GRC) to establish and lead our GRC function at Posit. This foundational leadership role requires a strategic and hands-on approach to building the department from the ground up, creating and implementing policies, frameworks, and processes to ensure compliance with regulatory requirements and manage risks across the organization. 

The ideal candidate will be adept at working in fast-paced environments, comfortable with ambiguity, and possess a deep understanding of software and cloud security compliance frameworks. You’ll work closely with senior leadership to ensure that our governance, risk, and compliance practices are aligned with our company’s mission and growth strategy.

You will be responsible for identifying and driving initiatives to ensure compliance with federal, state, and international security and privacy regulations and contractual obligations. Our products are used in a variety of regulated environments, and we must know not only how those regulations apply to us but also be able to confidently and consistently share this information with our customers.

Since its inception, Posit has operated as a 100% distributed company with a SaaS-based infrastructure. This presents unique challenges and requires pragmatism and creativity to be successful. This position requires the ability to be proactive and strategic while being comfortable rolling up one’s sleeves. 

Key Responsibilities:

• Establish and lead the GRC function, developing a comprehensive governance, risk, and compliance strategy tailored to our company’s size, industry, and regulatory environment.
• Develop and maintain a compliance roadmap to ensure alignment with business objectives, regulations, and customer expectations.
• Develop, implement, and maintain corporate governance policies, standards, and frameworks to manage risks and ensure compliance with applicable laws, regulations, and industry best practices.
• Perform risk assessments and build risk management processes to identify, analyze, and mitigate risks related to cybersecurity, data privacy, and operational activities.
• Lead the development and enforcement of compliance programs that address internal and external requirements, ensuring all employees understand and adhere to relevant policies and regulations.
• Collaborate with internal stakeholders (e.g., legal, product, IT, engineering) to ensure compliance requirements are integrated into product development, IT systems, and data management practices.
• Create and manage a regular reporting process to provide executive leadership with insight into the company’s risk posture, compliance status, and audit results.
• Stay current on evolving regulatory environments, security threats, and compliance best practices, ensuring the company adapts its security posture accordingly.
• Work closely with senior leadership to communicate the company's compliance status and risk posture, making recommendations for improvements where necessary.
• Provide training and guidance to employees on security compliance best practices and foster a culture of security awareness throughout the organization.
• Serve as the main point of contact for internal and external audits, managing audit readiness, audit responses, and any remediation activities.

About you:

• Experience in governance, risk, and compliance, with a strong background in cybersecurity, data privacy, and risk management in the software or technology sector.
• Experience working in a software company, particularly in remote, cloud-based environments, is highly preferred.
• Experience managing and responding to audits, regulatory reviews, and compliance reporting.
• Metrics-driven, understands, develops, and delivers meaningful risk-based operational dashboards and reports to a broad audience, demonstrating our current program state and adherence to frameworks and standards. 
• Strong project management and organizational skills, with the ability to manage multiple initiatives and priorities.
• Ability to think strategically while being hands-on with the development and execution of projects and initiatives.
• Excellent communication and interpersonal skills, with the ability to influence and collaborate effectively with cross-functional teams. You can communicate with people on all levels and help make complex issues easier to understand.
• You invest in strong relationships with your colleagues and employ empathy when working through their issues.
• You default to a collaborative and communicative mentality, believing that adversarial relationships harm an organization's long-term success.
• You are highly ethical, possess excellent decision-making capabilities, and execute good time management skills.