Director of Governance, Risk & Compliance

Job Summary

Leading the design and implementation of a unified risk and compliance program, the full-time Director of Governance, Risk & Compliance (GRC) will oversee the information security compliance posture for a $2.5 billion insurance holding company in a hybrid work environment.

Key Responsibilities

• Own and maintain the enterprise-wide information security compliance posture across all operating entities
• Design and implement a unified GRC operating model across multiple insurance entities
• Build and scale a comprehensive Third-Party Risk Management (TPRM) program across the full vendor lifecycle

Required Qualifications

• 12-15+ years of experience in cybersecurity, risk management, compliance, or audit
• 5-7+ years in senior leadership roles within insurance or highly regulated financial services environments
• Licensed attorney (JD) or Certified Public Accountant (CPA) preferred
• Deep knowledge of NIST 800-53, ISO 27001, SOC 2, and PCI DSS
• Executive presence with the ability to influence across various domains including Legal, Audit, and Risk