Director, Cyber Governance and Compliance
Core
Lead contract negotiations for security and compliance terms, acting as the primary technical advisor to Sales and Legal teams while ensuring organizational capability to deliver on negotiated security commitments.
Role type
Director, Cyber Governance and Compliance (Strategic IC)
Builds
Pre-approved security positions, standardized language, and control framework mappings for externally-facing products and services
Domain
Financial services / Enterprise regulatory environments (GDPR, DORA, NIS2, EU AI Act)
Required skills
Security governance, risk management, and compliance (GRC); Security assurance; Artificial intelligence risk; Third-party risk management; Regulatory interpretation; Security contract negotiation; Risk-based decision making; Scalable process and framework development; Cloud security controls (AWS, Azure, GCP); Containerization (Docker, Kubernetes, OpenShift); Identity and access management; Encryption protocols; Security monitoring; Compliance frameworks (COBIT, SOC 2, ISO 27001, NIST CSF, NIST 800-53, ISO 42001)
Preferred skills
CISSP, CISM, CISA, CCSP, CIPP, CRISC; Contract management platforms; Security questionnaire automation tools (OneTrust, MetricStream); GRC technology solutions
Technologies
AWS, Azure, GCP, Docker, Kubernetes, OpenShift, OneTrust, MetricStream
Responsibilities
Lead contract negotiations for security and compliance terms; Apply risk-based decision making to evaluate proposed security commitments; Partner with Legal as a technical subject matter expert; Analyze and interpret complex regulatory requirements; Identify and address systemic gaps between client security demands and organizational capabilities; Establish and maintain a comprehensive knowledge repository of pre-approved security positions
Seniority
Director, strategic leadership & mentorship
