Director – Cybersecurity GRC
DLS Discovery, LLC
Posted: 10/19/2026CloudCyber SecurityServiceNow
Director, Market Access, Payer Accounts
Summit Therapeutics, Inc.
Posted: 10/19/2026
Rehab Director – PTA, COTA
Legacy Healthcare Services
Posted: 10/19/2026
Research Director – Cancer
The Health Management Academy
Posted: 10/19/2026
General Manager, Senior Director
2U
Posted: 10/19/2026
Transportation Director
RXO, Inc.
Posted: 10/19/2026ERPOracle
Director – Absence Consulting
Lincoln Financial
Posted: 10/19/2026
Director – Statistics
Eli Lilly and Company
Posted: 10/19/2026
Director, Field Quality
The Coca-Cola Company
Posted: 10/19/2026
Director of National Accounts – Specimen Management
BD
Posted: 10/19/2026
Service Director
GE HealthCare
Posted: 10/19/2026
Associate Director, CMC Digital Business Partner
Obsidian Therapeutics
Posted: 10/19/2026CloudERPPMP
Director of Nursing, DON, RN
Tutera Senior Living and Health Care
Posted: 10/19/2026
Senior Director, Institutional Initiatives – Portfolio Management
New York University Tisch School of the Arts
Posted: 10/19/2026
Director, Middle Mile Transportation
Nordstrom
Posted: 10/19/2026
Director, Continuous Value Improvement
Elevance Health
Posted: 10/19/2026Strategy – Program Development Director
Elevance Health
Posted: 10/19/2026
Director
Evergreen Strategy Group
Posted: 10/19/2026
Director, Project Controls, Project & Development Services – Data Centers
Cushman & Wakefield
Posted: 10/19/2026Senior Director, Project Controls – Scheduling
Cushman & Wakefield
Posted: 10/19/2026
Region Director
TerminixSIS India
Posted: 10/19/2026Director – Cybersecurity GRC
DLS Discovery, LLCCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in managing GRC operations, including compliance frameworks such as NIST, ISO, and SOC 2, while leveraging AI and automation for enhanced risk management and compliance monitoring. Proven ability to lead teams, engage with clients, and maintain robust governance structures.
Highest-signal resume keywords
GRC Leadership ExperienceMulti-Framework Compliance ManagementAI and Automation ImplementationExternal Assessor Relationship ManagementTechnical Security Controls Evaluation
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Own and mature the cyber risk register, transitioning from qualitative to quantitative risk assessment
- Define and maintain the cyber risk appetite and tolerance framework with the CISO
- Lead governance structures, policy lifecycle, RACI design, and security steering committee support
- Standardize policies and procedures across the business
- Own the annual compliance calendar and manage external assessor relationships
- Build and maintain continuous audit-ready compliance evidence
- Oversee GRC platform strategy, automated evidence collection, continuous controls testing, and real-time compliance monitoring
- Conduct readiness reviews, internal controls testing, and post-audit findings management
- Lead technical control validation
- Monitor regulatory changes and assess certification needs
- Transform GRC operations through AI and automation, including evidence gathering, controls mapping, compliance monitoring, risk quantification, anomaly detection, audit automation, questionnaire automation, vendor risk tooling, and policy workflow automation
- Maintain a unified cyber framework approach across ISO, SOC 2, NIST, and HIPAA
- Oversee Client Trust, including Trust Center strategy, security questionnaires, and client audit support
- Own Vendor Risk Management, including third-party tiering, assessments, due diligence, and remediation tracking
- Engage enterprise clients and prospects on security posture, due diligence, and audit inquiries
- Direct the company-wide security awareness and training program
- Lead, develop, and performance-manage a lean GRC team across three pillars
- Partner with the Director of Cybersecurity Operations as a unified cyber function reporting to the CISO
- Report program health, risk posture, and compliance status to the CISO
Requirements
What you’ll need- 15+ years of progressive experience in information security, with a minimum of 7 years in a GRC leadership role
- Demonstrated ownership of multi-framework compliance programs at a Director or equivalent level
- Proven track record managing external assessor relationships (Big 4 or specialist assessors preferred)
- Hands-on experience deploying or significantly maturing a GRC platform (AuditBoard, ServiceNow GRC, Archer, Vanta, or equivalent)
- Demonstrated experience implementing AI or automation within a GRC or compliance function
- Deep working knowledge of NIST SP 800-171, NIST CSF, ISO 27001:2022, SOC 2, PCI DSS, GDPR, and HIPAA Security Rule
- Understanding of technical security controls sufficient to evaluate control design and operating effectiveness
- Familiarity with cloud-native architectures and compliance strategies for SaaS-heavy environments
- Bachelor's degree in Information Security, Computer Science, Business, or a related field required
- Professional certifications such as CISSP, CISA, CRISC, CISM, or GIAC
- Exceptional communication, collaboration, client-facing, business judgment, continuous learning, discretion, and confidentiality abilities
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Cyber Risk AssessmentCompliance MonitoringContinuous Controls TestingTechnical Control ValidationRisk QuantificationAudit AutomationVendor Risk ManagementPolicy Workflow AutomationCloud-Native Compliance StrategiesGovernance Framework Development
Soft Skills
Exceptional CommunicationCollaborationBusiness JudgmentContinuous LearningDiscretion
Tools & Technologies
AuditBoardServiceNow GRCArcherVantaGRC Platform Strategy
Certifications & Qualifications
CISSPCISACRISCCISMGIAC
Industry Keywords
NIST SP 800-171NIST CSFISO 27001:2022SOC 2PCI DSSGDPRHIPAA Security Rule