Director of Cyber Governance, Risk & Compliance

Socket.dev; Sunnyvale (CA); On-site; USD 190,000 - 270,000; Full time

Job summary

Intuitive Surgical seeks a strategic leader to head the cybersecurity governance, risk, and compliance (GRC) program in Sunnyvale, CA. This role shapes the governance framework, risk management, and compliance posture across the organization, guiding executive reporting and stakeholder engagement.

The ideal candidate has 12+ years in cybersecurity leadership, 7+ years in enterprise GRC, and deep expertise in ISO/NIST standards, with a proven record in audits and regulatory programs.

Qualifications

• 12+ years of leadership experience in cybersecurity, information security, governance, risk management, or compliance.
• 7+ years leading enterprise-scale GRC programs and teams.
• Deep expertise in ISO 27001, ISO 27036, ISO 42001, NIST CSF, NIST AI RMF, CSA AISMM, and related control frameworks.
• Experience presenting cybersecurity risk, compliance, and governance topics to executives and governance committees.
• Proven track record of leading audits and regulatory assessments.

Responsibilities

• Define, implement, and mature the enterprise cybersecurity governance framework with policies, standards, procedures, and oversight.
• Lead enterprise cybersecurity risk management, including risk assessment methodologies and reporting.
• Oversee compliance programs with ISO/NIST frameworks and regulatory requirements; manage audits and remediation.
• Oversee third-party risk management with procurement, legal, privacy and business stakeholders.
• Partner with senior leadership to integrate security, risk, and compliance into planning and execution.
• Build and lead a high-performing GRC team; manage budgets and strategic investments.

Skills

Strategic leadership

Executive communication

Security governance

Risk management

Regulatory compliance

Education

Bachelor's degree in Cybersecurity or related field

Job description

Intuitive Surgical seeks a strategic leader to head the cybersecurity governance, risk, and compliance (GRC) program in Sunnyvale, CA. This role shapes the governance framework, risk management, and compliance posture across the organization, guiding executive reporting and stakeholder engagement.

The ideal candidate has 12+ years in cybersecurity leadership, 7+ years in enterprise GRC, and deep expertise in ISO/NIST standards, with a proven record in audits and regulatory programs.