Director, Security Compliance

Required Education and Experience

Applicants must meet one of the following education and experience requirements: 

* 12 years of relevant experience and a Bachelor’s degree or its equivalent or   
* 8 years of relevant experience and a Master’s degree or 
* 5 years of relevant experience and a PhD

Required Skills

* 12+ years of experience in IT security, IT risk management or IT audits

* 6+ years of experience with industry compliance and security standards                  including  one or more of the following: SOC2, FedRAMP, PCI, ISO 27001,              HIPAA, HITEC

* 4+ years of experience managing initiatives across teams and geographies

Desired Skills

* Security certifications (e.g., CISA, CISSP) are a plus. 

* Strong verbal and written communications skills and ability to lead effectively          across organizations.
* Demonstrated ability to independently lead program work at an enterprise scale
* Proven leadership, organization, and planning skills.
* Excellent time management skills including the ability to prepare, prioritize, and      complete work plans.
* Proven track record of effective people management skills including hiring,              assignment of work, performance management and employee coaching and          professional development. 
* Experience working in a fast-paced matrix organization.
* Excellent influencing, facilitation, and partnering skills.
* Experience in creating scorecards and metrics to establish baselines, highlight      progress and drive behaviors.
* Experience building enterprise governance, risk, and compliance programs or        driving the program's evolution to meet new requirements.
* Experience advising customers on architectures to effectively meet business          needs while also meeting or exceeding industry standards and local policies.
* Ability to think strategically in a security context of business, product, and                technical challenges.
* Demonstrate advanced understanding of security controls, IT controls and              related standards.
* Ability to interact and communicate with senior executives across multiple              business areas.
* Proven ability to deliver cross-functional strategic initiatives
* Experience with enterprise governance, risk, and compliance software packages    (e.g. Archer).
Working knowledge of risk management processes and risk                registers.
* Deep understanding of enterprise risk management methods and techniques to      drive successful outcomes in a global environment.