Director, Security Governance Risk & Compliance

Global Relay; Vancouver; On-site; CAD 140,000 - 195,000; Full time

Benefits offered by this job

Extended-health benefits

Virtual healthcare

Wellness allowance

Vacation days per tenure

Paid sick days

Maternity/Parental enhancement

Job summary

Global Relay seeks a Director for Governance, Risk & Compliance to define and lead the GRC function. You will establish frameworks and an operating model enabling risk-informed security decisions across the organization.

You will provide strategic leadership for governance, risk, assurance and compliance, translating complex risks into business terms for executives and stakeholders, while ensuring regulatory and contractual compliance across technology teams.

Qualifications

• 10–15+ years in cybersecurity, governance, risk management, audit, compliance or related disciplines.
• 5+ years of leadership experience managing teams and security programs.
• Strong understanding of governance, risk management, assurance and compliance principles.
• Experience leading audits, certifications and regulatory assessments.
• Deep knowledge of ISO 27001, SOC 2, NIST, FedRAMP and CIS Controls.
• Knowledge of emerging technology governance concepts and regulatory requirements.
• Experience presenting complex risks to executive leadership.
• Strong business acumen and ability to balance risk with business objectives.
• Proven ability to influence decisions and drive change.
• Excellent leadership and stakeholder management skills.

Responsibilities

• Define and maintain the enterprise security governance framework and control processes.
• Evolve the security risk management methodology with consistent identification and reporting.
• Lead governance forums and risk committees for oversight and escalation.
• Communicate the organization’s security risk posture to executives.
• Oversee security assurance strategies, testing and remediation validation.
• Oversee audits, certifications and external assessments.
• Govern emerging technologies, including AI, within risk and regulatory boundaries.
• Lead third‑party security risk management activities.
• Oversee security awareness and training programs.
• Define security metrics and reporting to measure program effectiveness.
• Collaborate with Legal, Privacy, Product, Engineering and Operations leaders.

Skills

Governance & Risk management

Security governance

Regulatory compliance

Audits & certifications

Executive communication

Strategic leadership

Third-party risk

Emerging technologies governance

Security metrics & KPIs

Industry frameworks

Education

CISSP/CISM/CRISC/CISA or equivalent

Tools

ISO 27001

SOC 2

NIST

FedRAMP

ISO/IEC 42001

Job description

Who we are

For over 25 years, Global Relay has set the standard in enterprise information archiving with industry‑leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.

Your role

As Director, Governance Risk & Compliance, you are responsible for defining and leading Global Relay’s Governance, Risk & Compliance function. Reporting to the Chief Information Security Officer, you establish the frameworks, governance structures and operating model that enable consistent security decision‑making, transparent risk management and trusted assurance across the organization.

You provide strategic leadership for security governance, risk management, assurance, cybersecurity compliance, third‑party risk management and security awareness programs. Working closely with executive leadership, business stakeholders and technology teams, you translate complex security and technology risks into business context, influence strategic priorities and ensure the organization maintains a strong and resilient security posture while meeting regulatory, contractual and organizational requirements. You ensure emerging technologies, including AI, are governed in a manner that aligns with organizational objectives, risk appetite and regulatory obligations.

Your responsibilities

• Define and maintain the enterprise security governance framework, including policies, standards, control frameworks and governance processes.
• Establish and evolve the security risk management methodology, ensuring risks are consistently identified, assessed, managed and reported.
• Lead security governance forums and risk committees, ensuring effective oversight, escalation and decision‑making.
• Define and communicate the organization’s security risk posture, emerging risks and strategic priorities to executive leadership.
• Establish and oversee the enterprise security assurance strategy, including control testing, continuous assurance and remediation validation activities.
• Oversee security audits, certifications and external assessments, including ISO 27001, SOC 2, FedRAMP, ISO 42001 and other applicable frameworks.
• Establish and oversee governance processes for emerging technologies, including AI, ensuring associated risks, regulatory requirements and control expectations are appropriately integrated into governance, risk management, assurance and compliance activities.
• Provide strategic oversight of third‑party security risk management activities.
• Establish and oversee the enterprise security awareness and training program.
• Define security metrics, key risk indicators and reporting requirements to measure program effectiveness and support risk‑informed decision‑making.
• Partner with Legal, Privacy, Product, Engineering and Operations leaders to integrate security governance and risk‑management practices across the organization.
• Lead, develop and mentor Governance, Risk & Compliance leaders and analysts.
• Drive continuous improvement and maturity across governance, risk, assurance and security compliance capabilities.
• Act as a trusted advisor to executive leadership on governance, risk, compliance and emerging technology governance matters.

About you

• 10‑15+ years of experience in cybersecurity, governance, risk management, audit, compliance or related disciplines.
• 5+ years of leadership experience managing teams and security programs.
• Strong understanding of governance, risk management, assurance and compliance principles.
• Experience leading audits, certifications and regulatory assessments.
• Deep knowledge of frameworks such as ISO 27001, SOC 2, NIST, FedRAMP and CIS Controls.
• Knowledge of emerging technology governance concepts, evolving regulatory requirements and industry frameworks, including ISO/IEC 42001.
• Experience presenting complex security and technology risks to executive leadership.
• Strong business acumen and the ability to balance risk, operational and business objectives.
• Demonstrated ability to influence organizational decisions and drive change.
• Excellent leadership, coaching and stakeholder management skills.
• Certifications such as CISSP, CISM, CRISC, CISA or equivalent are preferred.

Compensation

Global Relay advertises the pay range for this role in compliance with British Columbia’s pay transparency laws. Individual pay rates are determined by evaluating factors such as expertise, skills, education and professional background. The range below reflects the expected annual base salary, which is only one element of our comprehensive total rewards package designed to reflect our company pay philosophy, culture and values. We aim to foster an inspiring work environment and support employees’ work‑life rhythms. We provide a comprehensive extended‑health benefits program, including virtual healthcare and a wellness allowance. Employees also receive annual allotted vacation days, which increase based on tenure. Other benefits include: paid sick days, maternity/parental enhancement program, bonus, and an RRSP contribution matching program. For Vancouver‑based employees, we provide a subsidized meal program, courtesy of our talented in‑house culinary team!
British Columbia – Base salary range: $140,000 CAD – $195,000 CAD

What you can expect

At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills.

Global Relay is an equal‑opportunity employer committed to diversity, equity and inclusion. We seek to ensure reasonable adjustments, accommodations and personal time are tailored to meet the unique needs of every individual.

To learn more about our business, culture and community involvement, visit https://www.globalrelay.com.