Director, Global Security Compliance & Enforcement

Ernst & Young Oman; Richmond (VA); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Medical & dental

Hybrid work model

401(k) & pension

Paid time off

Job summary

EY in the United States is seeking a Director of Global Lead Security Compliance & Enforcement to own strategy, operating model, and outcomes for the global Security Compliance function within Technology Assurance, Risk & Policy. You will transform the function into a proactive, audit-ready organization guiding governance across enterprise risk.

The role requires leading a distributed team, partnering with CTOs and risk owners, and delivering a multi-year roadmap while balancing policy with

Qualifications

• 12+ years of professional experience in security compliance, technology risk, policy, or GRC.
• Experience leading distributed, matrixed teams and advising senior executives.

Responsibilities

• Define and execute the global Security Compliance strategy, target operating model, multi-year roadmap, priorities and metrics.
• Lead a globally distributed, capability-led organization to address high-risk exposures while sustaining GRC operations.
• Own global policy compliance and enforcement, including backlog reduction and risk acceptance.
• Build data-driven risk intelligence with dashboards, metrics, and executive reporting.
• Establish governance for frontier AI, DataGuard obligations, and technology-lifecycle risk.

Skills

Cyber security

Executive communication

Risk governance

GRC operations

Data analytics

Education

Cyber security education background

Job description

EY in the United States is seeking a Director of Global Lead Security Compliance & Enforcement to own strategy, operating model, and outcomes for the global Security Compliance function within Technology Assurance, Risk & Policy. You will transform the function into a proactive, audit-ready organization guiding governance across enterprise risk.

The role requires leading a distributed team, partnering with CTOs and risk owners, and delivering a multi-year roadmap while balancing policy with