Director, IT Governance, Risk and Compliance

Prologis; Denver (CO); On-site; USD 168,000 - 232,000; Full time

Benefits offered by this job

Healthcare insurance

Dental insurance

Vision insurance

401(k) with 50% match up to 12%

Paid time off 22 days per year

Job summary

Prologis in Denver, Colorado is seeking a Director of IT Governance, Risk and Compliance to lead the global GRC program. You will establish governance, risk, and compliance priorities across countries and partner with Security, Legal, HR, Finance, and business teams to strengthen oversight.

The role focuses on modernizing GRC processes with AI, automation, and system integrations to improve reporting, efficiency, and control effectiveness.

Qualifications

• 10+ years of IT governance, risk, or compliance experience.
• 3+ years of people-management experience.
• Proven track record leading enterprise GRC programs.
• Familiar with CSF 2.0 and the Three Lines Model.
• Experience with SOX, ITGC, and global regulatory requirements.
• Experience applying AI, workflow automation, and system integrations to GRC.
• Ability to influence executives and cross-functional teams.
• Ability to exercise sound judgment on sensitive matters.

Responsibilities

• Lead the global IT GRC program and set priorities across governance and assurance.
• Oversee risk assessments, control requirements, and remediation across the Three Lines Model.
• Ensure compliance activities for SOX, GDPR, HIPAA, DORA, SWIFT, and other regs.
• Govern third-party and cyber supply chain risk and data protection.
• Perform operational due diligence assessments.
• Stay ahead of evolving regulations and translate changes into GRC requirements.
• Modernize GRC with AI, automation, and integrations.
• Develop and mentor the GRC team and manage vendors.

Skills

IT governance

risk management

compliance

GRC programs

CSF 2.0

Three Lines Model

AI for GRC

staff leadership

Education

Bachelor's degree or equivalent

Tools

AI tools

Workflow automation

System integrations

Job description

At Prologis, we don’t just lead the industry—we define it with a 1.3 billion square foot portfolio and an annual throughput of approximately $3.2 trillion. We create the intelligent infrastructure that powers global commerce, seamlessly connecting the digital and physical worlds. From agile supply chains to energy solutions, our ecosystems help your business move faster, operate smarter and grow sustainably. With unmatched scale, innovation and expertise, Prologis is a category of one—not just shaping the future of logistics but building what comes next.

Job Title: Director, IT Governance, Risk and Compliance Company: Prologis

A day in the life

The Director, IT Governance, Risk, and Compliance (GRC) leads Prologis’ global IT GRC program and team, reporting to the CISO. This role establishes governance, risk, and compliance priorities across the countries where Prologis operates and partners with global business and technology teams to strengthen technology risk and control oversight. The Director works closely with Security, Infrastructure, Internal Audit, Legal, HR, Risk, Finance, and business leadership to address regulatory, audit, third-party, and information risk requirements. The role also modernizes and scales GRC processes through AI, automation, workflow improvements, and system integrations to improve efficiency, reporting, and control effectiveness.

Key responsibilities

• Lead the global IT GRC program and establish strategy and priorities across governance, technology risk, compliance, and assurance.
• Lead IT risk and controls oversight within the Three Lines Model, including risk assessments, control requirements, risk acceptance and exceptions, control monitoring, remediation oversight, and leadership reporting aligned with the NIST Cybersecurity Framework (CSF) 2.0 and applicable regulatory and audit requirements.
• Oversee global technology compliance and assurance activities, including SOX, IT general controls (ITGC), GDPR, DORA, HIPAA, SWIFT, India’s Information Technology Act, and disaster recovery governance and testing oversight.
• Govern third-party and cyber supply chain risk, data protection and information risk, investigations, eDiscovery, and technology and cybersecurity support for investor.
• Operational Due Diligence (ODD) assessments and requests.
• Monitor emerging technology risks and evolving regulatory requirements, assess their impact on Prologis, translate applicable changes into GRC and control requirements, and advise leadership on implications.
• Modernize and scale GRC processes by applying AI, workflow automation, and system integrations to improve efficiency, reporting, control monitoring, and control effectiveness.
• Lead and develop the GRC team, manage GRC technology and vendors, and oversee security awareness and IT policy governance, including training campaign planning, communications coordination, and IT policy and procedure governance.

Building blocks for success Required

• 10+ years of relevant experience in IT governance, risk, compliance, IT audit, or related disciplines.
• 3+ years of people-management experience.
• Demonstrated experience leading enterprise GRC programs.
• Experience with the NIST Cybersecurity Framework (CSF) 2.0 and the Three Lines Model.
• Experience with SOX, IT general controls, and technology-related regulatory requirements in a global environment.
• Experience applying AI, workflow automation, and system integrations to streamline GRC processes, improve reporting, strengthen control monitoring, or increase operational efficiency.
• Ability to influence executives and collaborate effective across technology, Internal Audit, Legal, HR, Risk, Finance, and other coordinated functions.
• Ability to exercise sound judgment and discretion when handling sensitive matters.

Preferred

• Bachelor’s degree or equivalent relevant experience.
• Relevant GRC, audit, risk, or cybersecurity certification.
• Ability to learn quickly and adapt to evolving regulatory and technology requirements in a global environment.
• Demonstrates willingness and capability to leverage emerging technology, automation, and AI tools to improve efficiency, quality, and speed.
• Exercises sound judgement, creative thinking, and accountability for outcomes.

Hiring Salary Range of

$168,000 - $232,000. Salary and whole compensation package (bonus target & LTI (Long Term Incentives) to be determined by the candidate’s location, education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data.

#LI-KR1

People First

Each of us working at Prologis plays an essential role in the enduring success of our company. We value people who are decisive, courageous and adaptable. While we are one company, locations and departments operate with autonomy and accountability. Individuals take the initiative here. When you join Prologis, you work shoulder to shoulder with some of the top talent in the industry to do the best work of your career. Every employee belongs. Every employee contributes. Employees advance their careers here. As a successful global enterprise, Prologis has never lost sight of what matters most, our strong belief that our people are the most important part of our business. And because of that, we provide a generous total rewards package and take a lot of time to focus on quality management and leadership development. People come first here.

All full-time roles in the US come with a robust benefits package which includes healthcare, dental, and vision insurance for employees and eligible dependents.

• healthcare insurance for employees and eligible dependents
• dental insurance
• vision insurance
• Prologis also offers several other wellness, financial, and work/lifestyle-specific benefits.
• Our 401(k) retirement plan has a company match of 50% up to 12% of eligible compensation.
• We also offer generous PTO with a starting accrual of 22 days a year in addition to paid holidays and volunteer time.

All job offers are contingent upon successful completion of background verification.

Prologis is an Equal Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religions, sex, national origin, sexual orientation, gender identity, disability status, protected veteran status, or any other characteristic protected by law.

Employment Type: Full time

Location: Denver, Colorado

Additional Locations: We are builders, thinkers and doers creating more than space, we power global commerce. We seek and attract top talent from around the world and foster a culture where diverse ideas fuel innovation, collaboration and excellence