Senior Director, Security Governance

ZoomInfo; Ireland; Remote; EUR 180,000 - 240,000; Full time

Job summary

ZoomInfo in Ireland seeks a strategic Senior Director of Security GRC to mature enterprise governance, risk, and compliance. Reporting to the CISO, you will define guardrails for safe AI innovation and lead a global team to secure digital growth while balancing speed and risk.

This role requires 10+ years in security/GRC, expert knowledge of NIST AI RMF and ISO/SOC 2, and proven executive presence to translate risk for leaders and customers.

Qualifications

• 10+ years in information security and GRC.
• 5+ years in a senior leadership role.
• Deep knowledge of risk frameworks (NIST AI RMF) and security standards (ISO, SOC 2).
• Proven track record of scaling security teams and maturing programs.
• CISSP, CISM, CRISC, or CISA strongly preferred.

Responsibilities

• Define and execute a GRC roadmap across governance, risk, and compliance.
• Design and maintain the enterprise risk register with business leaders.
• Manage ISO, SOC 2, CIS controls and drive ongoing compliance.
• Build and manage a third-party/vendor risk program.
• Support security sales by building customer trust and rapid inquiries response.
• Automate processes and dashboards using GRC tools (e.g., ServiceNow GRC).
• Collaborate with Security, Legal, Product, and exec leadership to align risk with business objectives.

Skills

Info security

GRC

Executive leadership

Risk management

CISSP/CISM/CRISC/CISA

Education

Bachelor's degree in a relevant field

Master’s degree or PhD preferred

Job description

ZoomInfo is where careers accelerate. We move fast, think boldly, and empower you to do the best work of your life. You’ll be surrounded by teammates who care deeply, challenge each other, and celebrate wins. With tools that amplify your impact and a culture that backs your ambition, you won’t just contribute. You’ll make things happen–fast.

Job Description

Senior Director of Security Governance, Risk and Compliance (Ireland)

Location: Ireland (Dublin or Remote)

Reporting to: Chief Information Security Officer

Job Summary: ZoomInfo is seeking a strategic and action-oriented Senior Director of Security Governance, Risk, & Compliance (GRC) to mature our enterprise-wide governance, risk, and compliance function. Reporting to the CISO, you have a vision for how AI will be used to transform the GRC function at ZoomInfo, and the skills to execute your vision. You will also define the guardrails for safe AI innovation, balancing risk mitigation with speed of innovation. You will build and lead a high-performing team based in the US and India to secure our digital growth, manage third-party risk, and simplify audit readiness, ensuring security is a competitive advantage rather than a barrier. You are also a strong and active contributor who is comfortable as a player-coach, getting into the details alongside your team.

What You’ll Do

• GRC Strategy & Leadership: Define and execute a GRC roadmap, leading governance, risk, and compliance programs.
• Risk Management: Design and maintain the enterprise risk register, partnering with business leaders to identify, quantify, and mitigate risks.
• Continuous Compliance & Audit: Manage compliance with frameworks (ISO 42001,ISO 27001, ISO 27701, ISO 27017, and SOC2, and CIS Controls) and drive continuous compliance rather than just annual audits.
• Third-Party Risk (TPRM): Build and manage a right‑sized vendor risk program, assessing vendor maturity and reviewing security contracts.
• Security Sales Support: Enable ZoomInfo transaction velocity and ensure customer service by building customer trust and rapidly responding to inquiries
• Automation & Reporting: Leverage Agentic AI and GRC platforms (ServiceNow GRC, Vanta, and others) to automate processes, generate metrics, and deliver executive dashboards.
• Cross-Functional Influence: Act as the key liaison between Security, Legal, Product, and executive leadership to align risk posture with business objectives.

What You Bring

• Experience: 10+ years in info security/GRC, including 5+ years in a senior leadership role.
• Expertise: Deep knowledge of risk frameworks (NIST AI RMF) and security compliance standards (ISO, SOC 2).
• Actionable Leadership: Proven track record of scaling security teams, maturing programs, and building "security-by-design" cultures.
• Executive Presence: Ability to translate complex technical risks into business-relevant context for executive leadership and customers.
• Education: Bachelor’s degree in a relevant field (Master’s/PhD preferred).
• Certifications: CISSP, CISM, CRISC, or CISA strongly preferred.

About us

ZoomInfo (NASDAQ: GTM) is the Go-To-Market Intelligence Platform that empowers businesses to grow faster with AI-ready insights, trusted data, and advanced automation. Its solutions provide more than 35,000 companies worldwide with a complete view of their customers, making every seller their best seller.

ZoomInfo is committed to protecting your privacy when you apply for jobs with us. Please review our Job Applicant Privacy Notice for more details on how we handle your personal information. ZoomInfo may use a software-based assessment as part of the recruitment process. More information about this tool, including the results of the most recent bias audit, is available here.

ZoomInfo is proud to be an equal opportunity employer, hiring based on qualifications, merit, and business needs, and does not discriminate based on protected status. We welcome all applicants and are committed to providing equal employment opportunities regardless of sex, race, age, color, national origin, sexual orientation, gender identity, marital status, disability status, religion, protected military or veteran status, medical condition, or any other characteristic protected by applicable law. We also consider qualified candidates with criminal histories in accordance with legal requirements.

For Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. ZoomInfo does not administer lie detector tests to applicants in any location.