Senior Director, Governance, Risk & Compliance

Koch

. Define and lead the global enterprise GRC strategy, roadmap, operating model, governance structure, and global organization .

Posted 11/11/2026full-timeRemote • United StatesSenior💰 $175,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in defining and leading enterprise Governance, Risk, and Compliance (GRC) strategies, frameworks, and operating models while ensuring compliance with regulatory and certification requirements. Proven ability to influence stakeholders and manage complex risk decisions in a global, regulated environment.

Highest-signal resume keywords

Enterprise GRC Strategy DevelopmentCross-Functional AI Governance FrameworkISO 27001 Compliance KnowledgeRisk Management MethodologiesCISSP or CISM Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GovernanceRisk ManagementComplianceCybersecurityInformation SecurityAuditRegulatory RequirementsControl FrameworksRisk AssessmentMetrics and Analytics

Soft Skills

Stakeholder InfluenceTeam DevelopmentLeadershipCommunicationTraining and Awareness

Certifications & Qualifications

CISSPCISMCRISCCGEITCISAISO 27001 Lead ImplementerCMMC Credentials

Industry Keywords

AutomotiveMedical-DeviceOptical NetworkingAerospace & DefenseHighly Regulated Environment

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Define and lead the global enterprise GRC strategy, roadmap, operating model, governance structure, and global organization
Partner with business, legal, Digital, and Koch stakeholders to build an integrated governance architecture covering regulatory, certification, and customer requirements
Create horizon-scanning, impact-assessment, compliance-roadmap, evidence-management, and remediation capabilities
Maintain an integrated enterprise risk register with accountable owners, treatment plans, escalation thresholds, and analysis of systemic, correlated, and concentration risks
Maintain an enterprise security policy and common control framework with Koch
Define and operate an enterprise AI governance framework for responsible and secure AI adoption
Lead enterprise security training and awareness, including role-based requirements and effectiveness measures
Define GRC data, metrics, analytics, KRIs, KPIs, control-effectiveness measures, dashboards, and executive reporting
Serve as executive owner for internal and external audits, certifications, customer assessments, and regulatory examinations
Ensure audit and assessment findings are risk-ranked, remediated, validated, and closed
Advise business and functional leaders on complex risk decisions
Build, develop, and retain a high-performing global team with career paths, development programs, and succession plans

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related discipline
12 or more years of progressive experience in governance, risk, compliance, cybersecurity, information security, IT risk, audit, or a closely related field
Experience leading enterprise GRC programs in a complex, regulated, global organization
Experience influencing cross-functional stakeholders without direct authority
Experience translating security, regulatory, certification, contractual, and customer requirements into practical and repeatable enterprise controls and measurable compliance outcomes
Experience establishing and operating a cross-functional AI governance framework in a global organization
Working knowledge of ISO 27001, CMMC, and GXP requirements
Experience establishing enterprise risk methodologies, integrated risk registers, quantitative or semi-quantitative risk measures, and executive-level reporting
Experience leading audits, assessments, certifications, findings remediation, and assurance programs
Preferred: experience in automotive, medical-device, optical networking, aerospace & defense, or another highly regulated industrial environment
Preferred: deep experience implementing and operating a CMMC compliance framework in a globally distributed business
Preferred: hands-on experience designing and operating a risk-adjusted AI governance framework with development, infrastructure, legal, and business teams
Preferred: relevant certifications such as CISSP, CISM, CRISC, CGEIT, CISA, ISO 27001 Lead Implementer or Lead Auditor, CMMC credentials, or AI governance, privacy, regulatory, or risk-management credentials
Ability to travel 10–20% domestically and internationally

Benefits

Comp & perks

Variable pay, issued as a monetary bonus or in another form
Medical insurance
Dental insurance
Vision insurance
Flexible spending accounts
Health savings accounts
Life insurance
Accidental death and dismemberment (ADD) insurance
Disability insurance
Retirement benefits
Paid vacation/time off
Educational assistance
Infertility assistance may be included
Paid parental leave may be included
Adoption assistance may be included
Flexible work environment