Senior Director, Governance, Risk & Compliance

This is a fully remote position, open to applicants in Illinois, +1 more state.

📋 Description

• Develop and lead the global enterprise GRC strategy, roadmap, governance framework, and organizational structure.

• Collaborate with business, legal, Digital, and Koch stakeholders to establish a cohesive governance architecture that encompasses regulatory, certification, and customer obligations.

• Establish capabilities for horizon-scanning, impact assessment, compliance roadmaps, evidence management, and remediation.

• Maintain a comprehensive enterprise risk register with designated owners, treatment strategies, escalation thresholds, and analysis of systemic, correlated, and concentrated risks.

• Oversee the enterprise security policy and a unified control framework in collaboration with Koch.

• Define and implement an enterprise AI governance framework to ensure responsible and secure AI integration.

• Lead initiatives for enterprise security training and awareness, focusing on role-specific requirements and effectiveness metrics.

• Specify GRC data, metrics, analytics, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), control effectiveness measures, dashboards, and executive reporting.

• Act as the executive owner for internal and external audits, certifications, customer assessments, and regulatory reviews.

• Guarantee that audit and assessment outcomes are risk-ranked, remediated, validated, and resolved.

• Provide guidance to business and functional leaders on intricate risk-related decisions.

• Build, cultivate, and maintain a high-performing global team with defined career paths, developmental programs, and succession plans.

⛳️ Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related field.

• A minimum of 12 years of progressive experience in governance, risk, compliance, cybersecurity, information security, IT risk, audit, or a closely related discipline.

• Proven experience in leading enterprise GRC initiatives within a complex, regulated, global organization.

• Ability to influence cross-functional stakeholders without direct authority.

• Experience converting security, regulatory, certification, contractual, and customer requirements into practical, repeatable enterprise controls and measurable compliance results.

• Background in establishing and managing a cross-functional AI governance framework in a global context.

• Familiarity with ISO 27001, CMMC, and GXP standards.

• Proven ability to establish enterprise risk methodologies, integrated risk registers, quantitative or semi-quantitative risk metrics, and executive-level reporting.

• Experience leading audits, assessments, certifications, remediation of findings, and assurance programs.

• Preferred: experience in the automotive, medical device, optical networking, aerospace & defense, or another highly regulated industrial sector.

• Preferred: extensive experience implementing and managing a CMMC compliance framework in a globally distributed company.

• Preferred: hands-on experience in designing and managing a risk-adjusted AI governance framework alongside development, infrastructure, legal, and business teams.

• Preferred: relevant certifications such as CISSP, CISM, CRISC, CGEIT, CISA, ISO 27001 Lead Implementer or Lead Auditor, CMMC credentials, or AI governance, privacy, regulatory, or risk management certifications.

• Willingness to travel 10–20% both domestically and internationally.

🏝️ Benefits

• Variable pay, provided as a monetary bonus or in another form.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Flexible spending accounts.

• Health savings accounts.

• Life insurance.

• Accidental death and dismemberment (ADD) insurance.

• Disability insurance.

• Retirement benefits.

• Paid vacation/time off.

• Educational assistance.

• Infertility assistance may be included.

• Paid parental leave may be included.

• Adoption assistance may be included.

• Flexible work environment.