Director, GRC & Cyber Risk Leadership

Taft Stettinius & Hollister LLP; Cleveland (OH); Presencial; USD 120.000 - 150.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical Insurance

Dental Insurance

Vision Insurance

401K

Paid Time Off

Paid Holidays

Bonus

Descripción de la vacante

Taft Stettinius & Hollister LLP seeks a Director of Governance, Risk & Compliance to advance the firm’s information security governance, risk, compliance, and assurance programs. The role leads ISO/IEC 27001 ISMS operations and coordinates cross‑functional governance with Legal, IT, Privacy, and Procurement.

Responsibilities include maintaining certifications, coordinating internal audits, and guiding readiness for privacy and AI governance standards as the firm grows its technology environment.

Formación

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Risk Management, Law, or related field.
• 10+ years of progressive experience in information security, governance, risk, compliance, IT audit, privacy, or related disciplines.
• 5+ years of direct GRC, security assurance, risk, compliance, or audit leadership experience.
• Experience operating an ISO/IEC 27001‑certified ISMS and leading audits.
• Experience with privacy/governance frameworks (ISO/IEC 27701, 42001) and CMMC is preferred.

Responsabilidades

• Lead and mature the firm's information security governance, risk, compliance, and assurance programs.
• Maintain ISO/IEC 27001 ISMS certification and coordinate surveillance and recertification.
• Lead readiness for ISO/IEC 27701 and ISO/IEC 42001 certifications.
• Oversee CMMC and CUI compliance programs and vendor risk management.
• Coordinate governance across Information Security, IT, Privacy, Legal, and Procurement.

Conocimientos

GRC leadership

InfoSec governance

ISO 27001

NIST CSF

Vendor risk management

Project management

Policy writing

Educación

Bachelor’s degree in Information Security or related

Master’s degree in Cybersecurity (preferred)

Descripción del empleo

Taft Stettinius & Hollister LLP seeks a Director of Governance, Risk & Compliance to advance the firm’s information security governance, risk, compliance, and assurance programs. The role leads ISO/IEC 27001 ISMS operations and coordinates cross‑functional governance with Legal, IT, Privacy, and Procurement.

Responsibilities include maintaining certifications, coordinating internal audits, and guiding readiness for privacy and AI governance standards as the firm grows its technology environment.