Director, Security Governance Risk & Compliance
Core
Define and lead the enterprise security governance, risk management, assurance, and compliance function to ensure a resilient security posture and regulatory alignment.
Role type
Director, Security Governance Risk & Compliance
Builds
Enterprise security governance frameworks, risk management methodologies, assurance strategies, and compliance programs.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Strategic leadership in security governance, risk management, and compliance; audit and certification leadership; knowledge of ISO 27001, SOC 2, NIST, FedRAMP, and CIS Controls; emerging technology governance (including AI); executive communication; stakeholder influence; team mentorship.
Preferred skills
CISSP, CISM, CRISC, or CISA certifications.
Technologies
ISO 27001, SOC 2, NIST, FedRAMP, CIS Controls, ISO/IEC 42001
Responsibilities
Define and maintain enterprise security governance frameworks; establish and evolve security risk management methodology; lead security governance forums and risk committees; communicate security risk posture to executive leadership; oversee security audits and certifications; manage third-party security risk; oversee security awareness programs; define security metrics and KPIs; mentor GRC leaders and analysts.
Seniority
Director, strategic leadership with hands-on program oversight
