Director of the Trust Office (Cyber Governance, Risk & Compliance)
$190,000–$210,000 year
On-siteWestbrook, Maine, United States
Job Summary
Lead the transformation of IDEXX's Trust Office, evolving the Governance, Risk & Compliance organization into a modern, business-focused security function. Develop long-term strategy, operating models, and roadmaps to advance cybersecurity maturity while building a culture where GRC acts as a trusted partner. Modernize enterprise cyber risk management, controls assurance, and automation to enable informed business decisions and accelerate decision-making. Strengthen customer trust by leading security assessments, external audits, and compliance activities for frameworks including SOC 2, SOX, GDPR, and SEC requirements. Partner with executive leadership across technology, legal, product, and sales to translate complex security concepts into strategic business discussions. Lead and develop a team of GRC professionals while fostering collaboration to improve enterprise security maturity.
Required Qualifications
- 10-12+ years of progressive leadership experience in cybersecurity, governance, risk management, compliance, assurance, or related disciplines
- Experience building, transforming, or significantly maturing enterprise Governance, Risk & Compliance or Trust organizations
- Demonstrated success leading organizational change within complex global enterprises
- Experience partnering with executive leadership to improve cybersecurity maturity across the organization
- Exceptional executive communication skills with the ability to translate technical concepts into meaningful business discussions
- Experience influencing across organizations through partnership rather than authority
- A collaborative leadership style focused on coaching, relationship-building, and business enablement
- Experience developing cyber risk management programs, governance frameworks, policy programs, controls assurance, or continuous monitoring capabilities
- Experience supporting regulatory and compliance frameworks such as NIST CSF, CIS Controls, SOC 2, SOX IT General Controls, GDPR, SEC cybersecurity disclosure requirements, or similar frameworks
- Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, or similar technologies
- BISO (Business Information Security Officer) or similar business-facing cybersecurity leadership experience
- CISSP, CISM, CRISC, CISA, CGRC, or similar certifications
Desired Qualifications
- Familiarity with automation, AI-enabled governance, continuous controls monitoring, or risk telemetry
- Ideally you will be driving distance from our Westbrook, Maine corporate HQ, with the flexible hybrid requirement of only 8 days per month on-site
- We are also open to those in NH and MA if you can meet the on-site requirement, or close to it
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.