Director, Global Security Compliance & Enforcement

Ernst & Young Advisory Services Sdn Bhd; Hoboken (NJ); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Flexible vacation policy

Paid time off options

Job summary

EY seeks a Global Lead Security Compliance & Enforcement Director to own the strategy, operating model, and outcomes for Security Compliance across the organization. The role drives a proactive, intelligence-driven program that reduces risk debt, sustains governance, and ensures audit-ready posture.

You will lead a globally distributed team, partner with CTOs and risk leaders, set the multi-year roadmap, and report on compliance posture, risk trends, and remediation progress while balancing

Qualifications

• Deep knowledge of cyber security, technology and data risk, policy compliance, control assurance, GRC operations, remediation, and risk acceptance.
• Familiarity with ISO 27001/27002, ISO 31000, COBIT, and unified compliance frameworks.
• Ability to translate technical exposure into business risk and executive decisions.

Responsibilities

• Define and execute the global Security Compliance strategy, operating model, multi-year roadmap, and resource plan.
• Lead a globally distributed, capability-led organization addressing high-risk exposures while sustaining GRC operations.
• Own global policy compliance and the Non-Compliance Consequence Framework with enforcement, escalation, investigation, corrective action, and risk acceptance.
• Build data-driven risk intelligence with metrics, dashboards, and executive reporting to track risk and remediation progress.
• Direct remediation and technology-lifecycle governance, including vulnerability triage and EOL exposure.
• Establish compliance governance for frontier AI, DataGuard, and emerging technologies.
• Partner with CTOs, risk and governance stakeholders to balance policy with business impact and delivery, advancing automation.
• Lead distributed teams and develop talent strategies to ensure succession.

Skills

Cyber security

Technology risk

Policy compliance

GRC operations

Risk acceptance

ISO 27001/27002

ISO 31000

COBIT

Executive communication

Automation enablement

Education

Cyber security / information security degree

Risk management / governance background

Job description

EY seeks a Global Lead Security Compliance & Enforcement Director to own the strategy, operating model, and outcomes for Security Compliance across the organization. The role drives a proactive, intelligence-driven program that reduces risk debt, sustains governance, and ensures audit-ready posture.

You will lead a globally distributed team, partner with CTOs and risk leaders, set the multi-year roadmap, and report on compliance posture, risk trends, and remediation progress while balancing