# Director, Governance, Risk & Compliance at Apex Space

Apex Space is hiring a Director, Governance, Risk & Compliance in Los Angeles, United States. It pays $200k-$250k a year and Level rates it Little AI ●○○○; you can [apply on Apex Space](https://jobsbylevel.com/go/4d4ce950-6a6e-4c9b-914d-a6925343f332?utm_medium=ai-agent).

AI Level 1, AI centrality 36 out of 100. Los Angeles.

## Details

- Company: [Apex Space](https://jobsbylevel.com/companies/apex-space)
- AI level: AI Level 1 (score 36 out of 100)
- Location: Los Angeles
- Salary: $200k-$250k
- Posted: November 6, 2026
- Apply: https://jobsbylevel.com/go/4d4ce950-6a6e-4c9b-914d-a6925343f332?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=director-governance-risk-compliance-at-apex-space-0ed346

## Description

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge. For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles. Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more. We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet. About the Role We are hiring a Director, Governance, Risk & Compliance (GRC) to own that posture end to end and build the function that keeps Apex audit-ready across every framework our business depends on. This is a player-coach leadership role. You will personally own our GRC program — control frameworks, risk management, audits, assessments, and the body of evidence that proves our compliance — while building and leading the team that sustains it. You will directly manage an Information System Security Officer (ISSO) and Information System Security Manager (ISSM), setting their priorities, developing their careers, and holding the line on the standards our authorizations and certifications require. You will report to the Director of Cybersecurity and serve as the connective tissue between security, legal, engineering, IT, and program teams. Apex operates across government/defense (NIST SP 800-171, CMMC, FedRAMP), commercial security (SOC 2, ISO 27001), export and trade control (ITAR/EAR), and data privacy (GDPR, CCPA) — this role sees all of it and is accountable for turning that patchwork of obligations into a single, coherent, continuously-maintained program. Responsibilities • Own Apex's GRC program end to end, establish and maintain the control frameworks, policies, standards, and procedures that govern how the company secures its systems and data. • Lead, manage, and mentor the GRC team, including a direct-report ISSO and ISSM; set priorities, define ownership, and grow the team's capability as the program scales. • Drive compliance against government and defense requirements — NIST SP 800-171, CMMC, and FedRAMP — including SSP and POA&M development, control implementation, continuous monitoring, and audit/assessment readiness. • Own the commercial security certification roadmap (SOC 2 Type II, ISO 27001), managing scoping, evidence collection, auditor relationships, and remediation to certification and renewal. • Partner with Legal and Trade Compliance on export control (ITAR/EAR) and with Privacy stakeholders on GDPR/CCPA obligations, ensuring technical and administrative controls map cleanly to regulatory requirements. • Build and run the enterprise risk management process: maintain the risk register, lead risk assessments, drive remediation to closure, and report residual risk to leadership in terms the business can act on. • Manage the full audit and assessment lifecycle — internal, customer, and third-party — serving as the primary point of contact and owning the evidence, narratives, and corrective actions. • Establish and maintain a centralized control framework that de-duplicates overlapping requirements across regimes, so a single set of controls satisfies many obligations. • Run the vendor and third-party risk program, assessing suppliers and partners against Apex's security and compliance requirements. • Deliver clear, decision-ready reporting to the Director of Cybersecurity and executive stakeholders on compliance status, risk posture, and audit outcomes. Requirements • 8+ years in governance, risk, and compliance, information security, or a closely

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/director-governance-risk-compliance-at-apex-space-0ed346

Source: https://jobsbylevel.com/jobs/director-governance-risk-compliance-at-apex-space-0ed346

## Cite this page

Level. https://jobsbylevel.com/jobs/director-governance-risk-compliance-at-apex-space-0ed346.

Get job alerts: https://jobsbylevel.com/newsletter