Director, Security Governance Risk & Compliance
Core
Define and lead the enterprise security governance, risk management, assurance, and compliance function to ensure a resilient security posture and regulatory alignment.
Role type
Director, Security Governance Risk & Compliance
Builds
Enterprise security governance frameworks, risk management methodologies, assurance strategies, and compliance programs.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
Strategic leadership in security governance, risk management, and compliance; audit and certification leadership; knowledge of ISO 27001, SOC 2, NIST, FedRAMP, and CIS Controls; emerging technology governance (including AI); executive communication; stakeholder influence; team mentorship.
Preferred skills
CISSP, CISM, CRISC, or CISA certifications.
Technologies
ISO 27001, SOC 2, NIST, FedRAMP, CIS Controls, ISO/IEC 42001
Responsibilities
Define and maintain enterprise security governance frameworks; establish and evolve security risk management methodology; lead security governance forums and risk committees; communicate security risk posture to executive leadership; oversee security audits and certifications; manage third-party security risk; oversee security awareness programs; define security metrics and KPIs; mentor GRC leaders and analysts.
Seniority
Director, strategic leadership with hands-on program oversight
