Sr. Director, Governance, Risk & Compliance
Core
Define, lead, and mature enterprise governance, risk management, and compliance capabilities to protect science, enable business, and meet global regulatory obligations in a biotech/pharma environment.
Role type
Senior Director, Cybersecurity GRC
Builds
Enterprise cyber risk management, regulatory compliance, and security governance programs
Domain
Biotechnology / Pharmaceuticals / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Enterprise cyber risk management, regulatory compliance, security governance frameworks, NIST CSF v2.0, ERM program alignment, GxP-regulated systems oversight, HIPAA/SOX/FDA-adjacent regulations, third-party risk management (TPRM), executive reporting, audit and inspection management
Preferred skills
MBA, Master's, or JD, CISSP, CISM, CRISC, or CISA certifications, experience in regulated environments (biotech, pharma, healthcare, life sciences)
Technologies
NIST CSF v2.0, NIST 800-53, ISO 27001
Responsibilities
Lead and evolve the enterprise GRC program; Define and execute a multi-year cyber risk and compliance maturity roadmap; Own the cyber risk management lifecycle; Establish and maintain security governance frameworks, policies, and standards; Provide cybersecurity governance and risk oversight for GxP-regulated systems; Oversee regulatory and compliance activities related to HIPAA, SOX, FDA-adjacent regulations, CSV, and privacy; Lead internal and external audits, inspections, and assurance activities; Own and mature the third-party risk management (TPRM) program; Embed cybersecurity risk considerations into system lifecycle and validation activities; Define and track risk-based metrics and key risk indicators (KRIs); Build and lead a high-performing GRC organization; Deliver clear, actionable executive- and board-level reporting
Seniority
Senior Director, strategic leadership with hands-on execution
