Director, Governance, Risk & Compliance
Core
Lead enterprise Information Security Governance, Risk, Compliance, and Privacy programs to ensure industry-leading standards while enabling business growth.
Role type
Director of Governance, Risk & Compliance (GRC)
Builds
Enterprise security governance, privacy frameworks, and regulatory compliance programs
Domain
Fintech, Information Security, Privacy, Regulatory Compliance
Required skills
GRC strategy development, privacy program leadership, audit management, risk assessment, team leadership, cross-functional partnership
Preferred skills
CIPP/CIPM/CIPT/CISM/CISA certifications, fintech experience, Business Continuity Planning, multinational regulatory knowledge, WAF/CDN/cloud infrastructure familiarity
Technologies
GRC platforms, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA, HIPAA, PIPEDA, UK Data Protection Act
Responsibilities
Develop and execute enterprise GRC strategy; lead global privacy program and regulatory compliance; manage internal and external audits and certifications; assess organizational risks and build executive reporting; lead and mentor the Compliance and Privacy team; partner with Security, Legal, Product, and Sales to embed security into business processes
Seniority
Director, strategic leadership with hands-on execution
