Global Director of Security Compliance & Enforcement

EY; Minneapolis (MN); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension & 401(k)

Paid time off

Job summary

EY seeks a Director to lead Global Security Compliance within Technology Assurance, Risk & Policy. The role defines strategy, operating model, and governance for proactive compliance, risk reduction, and enforcement across a distributed global team.

Responsibilities include policy enforcement, risk intelligence, and governance for frontier AI and DataGuard obligations, with senior stakeholder engagement and multi-year roadmaps.

Qualifications

• Leadership of global security compliance and GRC operations.
• Experience enforcing policy and remediation of risk.
• Ability to translate risk data into executive decisions.
• Leading distributed teams in a matrix global organization.
• Strong engagement with senior stakeholders and governance forums.

Responsibilities

• Define and execute global security compliance strategy and operating model.
• Own enforcement, backlog reduction, and risk acceptance processes.
• Build data-driven risk intelligence with dashboards and executive reporting.
• Direct remediation and governance across technology lifecycles.
• Establish compliance governance for frontier AI and DataGuard obligations.
• Engage CTOs, risk, audit, and governance teams to balance policy and delivery.

Skills

Strategic leadership

GRC operations

Policy compliance

Risk governance

Executive stakeholder engagement

Education

Bachelor's degree

Tools

ISO 27001/27002

COBIT

Job description

EY seeks a Director to lead Global Security Compliance within Technology Assurance, Risk & Policy. The role defines strategy, operating model, and governance for proactive compliance, risk reduction, and enforcement across a distributed global team.

Responsibilities include policy enforcement, risk intelligence, and governance for frontier AI and DataGuard obligations, with senior stakeholder engagement and multi-year roadmaps.