Director of Security Governance Risk and Compliance

Stanton House; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

Stanton House seeks a Director of Security Governance, Risk, and Compliance to lead the development of a comprehensive GRC program within a rapidly expanding AI infrastructure environment. This senior leader will work closely with the CISO to establish scalable governance, risk management, and compliance frameworks that support growth while ensuring adherence to stringent security and regulatory standards.

The role involves building and owning the security GRC program from inception, defining

Qualifications

• Extensive leadership experience in security governance, risk and compliance (GRC).
• Hands-on expertise with SOC 2 and ISO 27001 and working knowledge of NIST 800-53/SOX ITGC.
• Ability to communicate effectively with executives, auditors and technical teams.

Responsibilities

• Build and own the security GRC program and operating model from inception.
• Define and implement policies, standards, controls and risk management processes.
• Lead compliance initiatives for SOC 2, ISO 27001, NIST 800-53 and SOX ITGC.
• Drive audit readiness, manage evidence collection and promote continuous improvement.

Skills

Leadership

GRC program management

Executive communication

Cross-functional collaboration

Tools

SOC 2

ISO 27001

NIST 800-53

SOX ITGC

Job description

The client is seeking a Director of Security Governance, Risk, and Compliance to lead the development of a comprehensive GRC program within a rapidly expanding AI infrastructure environment. This senior leader will work closely with the CISO to establish scalable governance, risk management, and compliance frameworks that support the organization's growth while ensuring adherence to stringent security and regulatory standards.

The role involves building and owning the security GRC program and operating model from inception, defining and implementing policies, standards, controls, and risk management processes across the business. The Director will lead compliance initiatives for frameworks such as SOC 2, ISO 27001, NIST 800-53, and SOX IT general controls, and will collaborate with security engineering, infrastructure, and executive stakeholders to translate requirements into effective, practical controls. Responsibilities also include driving audit readiness, managing evidence collection, and fostering continuous improvement without impeding business agility.

Ideal candidates will have significant leadership experience in security governance, risk, and compliance, with hands‑on expertise in SOC 2 and ISO 27001, as well as a strong working knowledge of NIST 800-53 and SOX ITGC. The ability to communicate effectively with executives, auditors, and technical teams, along with experience building or maturing programs in fast‑paced or evolving environments, is essential. This position offers a unique opportunity to shape the security governance strategy at scale, with meaningful ownership and visibility in a high‑growth sector.