Director, Governance, Risk & Compliance
Core
Lead enterprise Information Security Governance, Risk, Compliance, and Privacy programs to ensure industry-leading standards while enabling business growth.
Role type
Director of Governance, Risk & Compliance (GRC)
Builds
Enterprise security governance, privacy frameworks, and regulatory compliance programs
Domain
Fintech, Information Security, Privacy, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC strategy development, privacy program leadership, audit management, risk assessment, team leadership, cross-functional partnership
Preferred skills
CIPP/CIPM/CIPT/CISM/CISA certifications, fintech experience, Business Continuity Planning, multinational regulatory knowledge, WAF/CDN/cloud infrastructure familiarity
Technologies
GRC platforms, SOC 2, ISO 27001, PCI DSS, GDPR, CCPA, HIPAA, PIPEDA, UK Data Protection Act
Responsibilities
Develop and execute enterprise GRC strategy; lead global privacy program and regulatory compliance; manage internal and external audits and certifications; assess organizational risks and build executive reporting; lead and mentor the Compliance and Privacy team; partner with Security, Legal, Product, and Sales to embed security into business processes
Seniority
Director, strategic leadership with hands-on execution
