# Senior Director, GRC

**Company:** [Okta](https://hotfix.jobs/companies/okta)
**Location:** San Francisco, CA
**Role:** Engineering Management
**Salary:** $236k – $363k/yr
**Experience:** 10+ years
**Skills:** Ai Governance, Generative AI, Agentic AI, Nist Ai Rmf, Iso/Iec 42001, Eu Ai Act, Risk Management, Risk Quantification, Soc 1/2/3, ISO 27001, Pci-Dss, Vendor Risk Management, Cloud Security, Continuous Control Monitoring, Compliance-As-Code
**Posted:** 2026-08-17

> Leads Okta’s security GRC organization, overseeing enterprise cyber risk, AI governance, global compliance, audits, vendor risk, and engineering-driven remediation. The role requires 10+ years of progressive Security GRC leadership, cloud technology experience, AI governance expertise, and a bachelor’s degree or equivalent experience.

## Job Description

## Responsibilities
- Lead and scale the Governance, Risk and Compliance (GRC) Security organization.
- Integrate AI and agentic tools into GRC operations, including automated evidence collection, risk scoring, policy mapping, and continuous audit readiness.
- Operationalize AI risk and governance frameworks covering training data protection, model risk management, responsible AI, NIST AI RMF, ISO/IEC 42001, and the EU AI Act.
- Lead enterprise-wide cyber risk identification, prioritization, treatment, and quantification.
- Maintain and expand global compliance across SOC 1/2/3, ISO 27001, ENS High, MS DPR, PCI-DSS, CSA STAR, and HDS.
- Evolve corporate information security policies and control standards.
- Direct vendor risk assessment programs for third-party SaaS tools and supply chains.
- Lead internal and external audits, customer assurances, and regulatory reviews.
- Drive engineering-led remediation of audit findings and control gaps.
- Partner with Product Management, Legal, Privacy, Infrastructure, and Business Technology teams.
- Recruit, mentor, and retain high-performing GRC engineering and risk management professionals.

## Requirements
- 10+ years of progressive leadership in Security GRC within a high-growth SaaS, cloud-first, or enterprise technology environment.
- Demonstrated understanding of generative and agentic AI security, data lineage, and global AI regulations.
- Extensive experience managing compliance for enterprise cloud environments.
- Deep knowledge of risk management methodologies and risk quantification.
- Proven experience building and leading technical GRC engineering and risk management teams.
- Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent experience.

## Compensation and Benefits
- San Francisco Bay Area annual base salary: **$264,000–$363,000 USD**.
- California excluding the San Francisco Bay Area, Colorado, Illinois, New York, and Washington annual base salary: **$236,000–$325,000 USD**.
- Equity where applicable, bonus, health, dental and vision insurance, 401(k), flexible spending account, and paid leave including PTO and parental leave.

## Similar jobs

- [Head of Engineering](https://hotfix.jobs/jobs/0eaa07ae-d596-4c35-933f-47b09f9f1a51) - LeafLink - Remote - $240k – $270k/yr
- [Director, Developer Platform & Experience](https://hotfix.jobs/jobs/f55ea75c-4bd7-4677-9c45-f24c06218f53) - Motive - San Francisco, CA - $229k – $285k/yr
- [Engineering Director](https://hotfix.jobs/jobs/a433acc2-95f0-43ad-a31e-5859334139c7) - Bestow - Remote - $225k – $280k/yr
- [Senior Director, Hivemind Operations & Sustainment](https://hotfix.jobs/jobs/2168e1c5-abe6-4561-a6ed-d2def1f309ab) - Shield AI - Washington, DC - $250k – $370k/yr
- [Engineering Director, Application Security](https://hotfix.jobs/jobs/78984d32-9660-45ef-8aa0-ebb97697aedb) - Trail of Bits - Remote - $250k – $300k/yr

**Apply:** https://hotfix.jobs/jobs/f1f8a092-098d-49ea-b9a9-f634796c9f4b
**Canonical:** https://hotfix.jobs/jobs/f1f8a092-098d-49ea-b9a9-f634796c9f4b