Director, Cybersecurity GRC

Director, Cybersecurity GRC is a senior leadership role responsible for defining and maturing the enterprise cybersecurity governance, risk, and compliance program. The role provides strategic direction for cybersecurity risk management, regulatory compliance, and internal control assurance, partnering with executive leadership, Internal Audit, Legal, and Privacy to ensure risks are identified, measured, and communicated in alignment with risk appetite and regulatory obligations. Key responsibilities include defining the GRC strategy and maturity model, establishing governance structures and standards, leading risk assessments and remediation oversight, developing and enforcing policies and control frameworks, ensuring audit readiness and evidence management, and delivering regular risk and compliance reporting to governance bodies. The position also involves overseeing the selection and optimization of GRC tools, leading a high-performing team, and coordinating across Technology, Legal, Privacy, Internal Audit, and business units to integrate risk considerations into strategic initiatives.