Overview In this role, you will lead the GRC, data security, and AI security functions to define risk appetite, governance, and guardrails. You will partner with Security Engineering to translate policy into architecture and drive secure innovation at scale. You'll act as a bridge between risk concepts and executive leadership, shaping enterprise risk posture and compliance programs. This position offers strategic influence across IT, privacy, legal, and engineering, with a focus on responsible AI and data protection.
Compensation / Benefits- sign-on bonus
- restricted stock units
- discretionary awards
- medical, financial, and other benefits
- 401(k) eligibility
- paid time off
Responsibilities- Define and maintain the enterprise security charter, operating model, risk appetite, and annual priorities for GRC and data protection
- Enforce security principles and guardrails tailored for GenAI and large-scale data environments
- Improve centralized risk, compliance, and data repository visibility through workflow automation
- Lead and develop a global, high-performing GRC/Data Security team and optimize the Risk/GRC-Engineering engagement model
- Translate strategic priorities and compliance requirements into clear architectural constraints for Security Engineering
- Review enterprise architecture from risk/compliance perspectives and align blueprints with data protection mandates
- Advance a multi-year security roadmap separating policy definition from technical execution
- Streamline risk and compliance reviews, focusing on business outcomes and automation
- Promote executive sponsorship of GRC as a business enablement process and optimize SRB operations
- Automate mechanisms to identify cyber risk, compliance debt, vendor risk, and policy deviations
- Advance Data and AI security to enable trusted data flows, responsible AI adoption, and scalable security guardrails
- Increase compliance automation to reduce manual audits while maintaining continuous compliance
- Strengthen relationships with IT, privacy, legal, data teams, Finance, Procurement, and Internal Audit
- Communicate complex cyber risks and AI trade-offs in clear business terms to align stakeholders
Key requirements- 15+ years in information security, GRC, or data protection in a global, high-tech organization (>3000 FTEs)
- Proven track record building or maturing GRC and data security functions, including governance and operating models
- Deep expertise across modern compliance frameworks and translating them into technical controls
- Strong fluency in data security (classification, DLP, privacy frameworks) and AI security (acceptable use, NIST AI RMF, algorithmic risk)
- Experience operating in a matrixed environment with clear separation of risk/requirements from technical execution
- Executive presence with ability to influence senior leaders, legal partners, engineers, and architects
- Excellent written, verbal, and visual communication for explaining complex cyber risks
- BS or Masters degree or equivalent experience
- strategic thinking
- influence and collaboration
- clear and concise communication
- GRC and policy governance
- data security and privacy controls
- AI security governance (GenAI guardrails, NIST AI RMF)
