Senior Director, Risk and Compliance
S&P Global
Posted: 10/19/2026AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesOpenShift
Healthcare Regulatory Assurance Lead
Rackspace Technology
Posted: 10/19/2026Cyber Security
Senior Consultant, Environmental Compliance Engineer, Sustainable Operations
ERM
Posted: 10/19/2026
Program Compliance Manager
impact.com
Posted: 10/19/2026
Senior Compliance Officer
SEB
Posted: 10/19/2026Senior Compliance Officer
SEB
Posted: 10/19/2026
Account Compliance Manager
Solera, Inc.
Posted: 10/19/2026
Quality Compliance Specialist
Cardinal Health
Posted: 10/19/2026
Research Compliance Coordinator
MSK
Posted: 10/19/2026
Director – North America Regulatory Affairs
Johnson & Johnson
Posted: 10/19/2026
Director, Ethics & Compliance Investigations
Gilead Sciences
Posted: 10/19/2026Director – North America Regulatory Affairs
Johnson & Johnson
Posted: 10/19/2026
Retail Food Compliance Specialist
Augusta, Georgia Government
Posted: 10/19/2026
Senior Manager – Regulatory Compliance
Nium
Posted: 10/19/2026
Regulatory Exam and Remediation Performance & Oversight
Citi
Posted: 10/19/2026SQLTableau
Principal Consultant, EHS Compliance
ERM
Posted: 10/19/2026
Launch Acceleration and Regulatory Enablement Lead
Sanofi
Posted: 10/19/2026
Patient Safety & Compliance Analyst I
General Dynamics Information Technology
Posted: 10/19/2026SQLTableau
Senior Packaging Safety & Compliance Specialist
Nestle
Posted: 10/19/2026Principal Consultant, EHS Compliance
ERM
Posted: 10/19/2026Senior Director, Risk and Compliance
S&P GlobalCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in security governance, risk management, and compliance, with a strong focus on regulatory interpretation and security contract negotiation. Proven ability to develop scalable processes and frameworks while effectively communicating complex technical concepts to diverse stakeholders.
Highest-signal resume keywords
Security GovernanceRisk ManagementRegulatory InterpretationSecurity Contract NegotiationSecurity Assurance Frameworks
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Lead contract negotiations for security and compliance terms in client agreements
- Serve as the primary technical advisor to Sales and Legal teams
- Maintain strategic customer relationships
- Evaluate proposed security commitments using risk-based decision making
- Analyze compensating controls and potential roadmap investments
- Communicate risk rationale clearly to stakeholders at all levels
- Partner with Legal as the technical subject matter expert
- Ensure organizational capability to deliver on negotiated security commitments
- Provide potential contractual language
- Analyze and interpret complex regulatory requirements
- Assess organizational compliance capabilities
- Develop guidance for development and technical teams
- Identify systemic gaps between client security demands and organizational capabilities
- Partner cross-functionally and advocate for strategic roadmap investments
- Maintain a knowledge repository of pre-approved security positions, standardized language, and control framework mappings
Requirements
What you’ll need- 15+ years of total progressive experience in security governance, risk management, and compliance (GRC), security assurance, artificial intelligence or third-party risk management
- Expertise in regulatory interpretation and security contract negotiation
- Working knowledge of financial services and enterprise regulatory environments, including GDPR, DORA, NIS2, EU AI Act and related compliance regimes
- Proven track record of making independent, defensible risk decisions in high-pressure deal environments with measurable business impact
- Experience developing and implementing scalable processes, playbooks, and frameworks for security assurance functions in enterprise environments
- Comprehensive technical knowledge of infrastructure and application controls, cloud security controls, AWS, Azure, or GCP, Docker, Kubernetes, or OpenShift, identity and access management, encryption protocols, and security monitoring solutions
- Expert-level proficiency in COBIT, SOC 2, ISO 27001, NIST Cybersecurity Framework, NIST 800-53, and ISO 42001
- Exceptional written and verbal communication skills, including engaging with legal counsel, negotiating complex terms, and presenting technical concepts to executive leadership
- Bachelor's degree in Computer Science, Information Security, Risk Management, Business Administration, or related field, or equivalent professional experience
- Industry certifications such as CISSP, CISM, CISA, CCSP, CIPP, or CRISC preferred
- Hands-on experience with contract management platforms, security questionnaire automation tools such as OneTrust or MetricStream, and GRC technology solutions preferred
- Indefinite right to work in the United States
Benefits
Comp & perks- Annual incentive plan
- Health care coverage
- Generous time off
- Continuous learning resources
- Competitive pay
- Retirement planning
- Continuing education program
- Company-matched student loan contribution
- Financial wellness programs
- Family benefits
- Retail discounts
- Referral incentive awards
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security GovernanceRisk ManagementRegulatory InterpretationSecurity Contract NegotiationInfrastructure ControlsCloud Security ControlsIdentity And Access ManagementEncryption ProtocolsSecurity Monitoring SolutionsCompliance Capabilities Assessment
Soft Skills
Exceptional Communication SkillsStakeholder EngagementNegotiation SkillsCross-Functional CollaborationStrategic Relationship Management
Tools & Technologies
Contract Management PlatformsSecurity Questionnaire Automation ToolsOneTrustMetricStreamGRC Technology Solutions
Certifications & Qualifications
CISSPCISMCISACCSPCIPPCRISC
Industry Keywords
GDPRDORANIS2EU AI ActCOBITSOC 2ISO 27001NIST Cybersecurity FrameworkNIST 800-53ISO 42001