IT Sr Director, Compliance and Risk Governance
Core
Provide strategic leadership and oversight of the enterprise Cybersecurity Governance, Risk, and Compliance (GRC) program, establishing frameworks to identify, assess, and manage cybersecurity risks while ensuring regulatory compliance.
Role type
Senior IC strategy-level cybersecurity GRC director
Builds
Enterprise cybersecurity governance frameworks, risk management programs, compliance initiatives, and third-party risk processes
Domain
Cybersecurity, Enterprise Risk Management, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise cybersecurity GRC program leadership, enterprise risk management strategy, regulatory compliance management, third-party risk management, executive reporting, team building and leadership, budget management, strategic planning, process modernization, stakeholder management
Preferred skills
CISSP, CISM, CRISC, CISA
Technologies
ISO 27001, ISO 27036, ISO 42001, NIST CSF, NIST AI RMF, CSA AISMM
Responsibilities
Define and mature enterprise cybersecurity governance frameworks; lead enterprise cybersecurity risk management programs; establish compliance programs for regulations and standards; oversee third-party cybersecurity risk governance; serve as key advisor to senior leadership on risk and compliance; build and lead a high-performing GRC team
Seniority
Senior, hands-on IC with strategic leadership
