Director, Security Governance, Risk and Compliance
Core
Lead global security governance, risk, and compliance programs to maintain regulatory compliance, manage M&A due diligence, and build customer trust through transparent security practices.
Role type
Director, Security GRC (Strategic leadership with hands-on execution)
Builds
Global security governance frameworks, risk management programs, compliance roadmaps, and M&A due diligence processes
Domain
Information Security, Regulatory Compliance, Corporate Governance
Required skills
Strategic leadership, risk management, audit management, regulatory framework expertise (GDPR, SOC 2, ISO 27001), M&A due diligence, stakeholder management, change management, data governance, GRC tool configuration
Preferred skills
GxP/FDA/ICH certification experience, FedRamp/FISMA experience, SOX audit experience, LogicGate administration, CISA/CISM/CRISC/CISSP certifications, CIPP/e/us certification, HIPAA/HITECH experience
Technologies
GRC tools, LogicGate, AI/automation tools for compliance
Responsibilities
Lead and manage a global team to oversee security governance, risk, compliance, and privacy activities; Directly manage and own security policies, procedures, and controls; Develop and implement a comprehensive information security risk management program; Foster strong relationships with internal stakeholders, external auditors, and vendors while managing M&A due diligence; Oversee data governance, product certification, and compliance efforts; Configure and maintain GRC tools for compliance evidence collection; Collaborate with Privacy Counsel on ISO 27701 certification and lead security audits; Support sales and marketing teams with certification roadmaps and compliance reporting; Create and manage a security M&A due diligence plan; Leverage AI and technologies to reduce compliance overhead; Partner with engineering and product teams to create effective compliant processes
Seniority
Director, strategic leadership with hands-on execution
