The Job

Own is looking for a experienced and strategic-minded Director of Governance to lead our governance initiatives and drive the development of robust governance frameworks and programs. Reporting to the Chief Information Security Officer (CISO), you will be responsible for overseeing a wide range of governance activities, including audits, compliance management, third-party risk management, and more. This role offers an exciting opportunity to make a significant impact and ensure the highest standards of governance across Own.

Your Day-to-Day Role

• Lead the development, mapping and implementation of governance frameworks and programs to ensure compliance with regulatory requirements, industry standards, and best practices.
• Oversee audits and assessments to evaluate compliance with internal policies, regulatory requirements, and contractual obligations.
• Manage compliance frameworks and programs, including GDPR, HIPAA, SOC 2, ISO 27001, and others, ensuring alignment with business objectives and risk appetite.
• Lead third-party risk management (TPRM) and fourth-party risk management (FPRM) programs to assess and manage risks associated with vendors and partners.
• Manage supply chain management processes, including vendor assessments, due diligence, and ongoing monitoring.
• Oversee HR compliance initiatives, ensuring compliance with employment laws, regulations, and company policies.
• Lead awareness training programs to educate employees on governance requirements, policies, and procedures.
• Develop and manage a comprehensive risk program, including enterprise risk management (ERM) and operational risk management.
• Govern service level agreements (SLAs) to ensure alignment with business objectives and customer expectations.
• Prepare the organization for public sector engagements, ensuring readiness to meet government-specific requirements and regulations.
• Create and maintain standards, guidelines, procedures, and policies related to governance, ensuring clarity, consistency, and effectiveness.

Your Work Experience

• Bachelor's degree in Business Administration, Information Security, or related field; Master's degree preferred.
• CISA, CISM, CISSP, or other relevant certifications preferred.
• 10+ years of experience in governance, risk management, and compliance (GRC), with at least 5 years in a leadership role.
• Experience with the Public Sector, FedRamp Preferred
• Proven track record of developing and implementing governance frameworks and programs in a complex, multi-regulatory environment.
• Deep understanding of regulatory requirements, industry standards, and best practices related to governance, risk, and compliance.
• Strong knowledge of third-party risk management (TPRM) and supply chain risk management principles and practices.
• Excellent communication and collaboration skills, with the ability to effectively engage and influence stakeholders at all levels.
• Strong analytical and problem-solving skills, with the ability to anticipate and mitigate risks effectively.

Important Details

This is a full-time position. The ideal candidate will work out of the DMV area to maximize collaboration and interaction with the business. Travel may be required.

Own is dedicated to creating an environment where employees thrive. It’s why we provide every employee with unlimited PTO, generous medical benefits, and a 401(k) savings plan with a 4% employer match. 

Creating an environment where employees thrive also means making sure every employee feels accepted. As we scale to help all types of companies protect precious data, our team must reflect the diversity we serve. Own is an Equal Opportunity Employer and we believe that every employee in the company brings a unique perspective that they can and should contribute in order to make an impact every day. We strive to be one team and one culture that builds trust through transparency. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, age, national origin, protected veteran status or disability status.

Learn more at owndata.com.

#LI-Remote