Senior Director, Security Governance
Core
Strategic leadership of enterprise-wide governance, risk, and compliance (GRC) with a focus on maturing the function using AI to balance risk mitigation with innovation speed.
Role type
Senior Director, Security Governance, Risk, and Compliance (GRC)
Builds
Enterprise GRC programs, risk registers, vendor risk management systems, and automated compliance dashboards.
Domain
Cybersecurity, Enterprise Risk Management, Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
GRC strategy and roadmap execution, enterprise risk register management, compliance framework implementation (ISO, SOC2, NIST), third-party risk management, AI integration in security, executive communication, cross-functional stakeholder alignment
Preferred skills
Scaling security teams, security-by-design culture building, Agentic AI and GRC platform utilization (ServiceNow, Vanta)
Technologies
ServiceNow GRC, Vanta, Agentic AI, ISO 42001, ISO 27001, ISO 27701, ISO 27017, SOC2, CIS Controls, NIST AI RMF
Responsibilities
Define and execute GRC roadmap, design and maintain enterprise risk register, manage continuous compliance and audit readiness, build and manage vendor risk program, enable security sales support, leverage AI and GRC platforms for automation and reporting, act as liaison between Security, Legal, Product, and executive leadership
Seniority
Senior Director, strategic leadership with hands-on contribution