Global Lead, Security Compliance & Enforcement (Director)

EY; Cleveland (OH); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking a Director of Global Lead Security Compliance & Enforcement to shape strategy and operating model across Technology Assurance, Risk & Policy. You will lead a globally distributed team delivering proactive governance and audit-ready outcomes.

This role partners with CTOs and risk leaders to balance policy with business impact, set multi-year roadmaps, and evolve enforcement capabilities in frontier AI and DataGuard obligations, while maintaining strong executive reporting.

Qualifications

• Deep knowledge of cyber security, technology and data risk, policy compliance, control assurance, GRC operations.
• Understanding of ISO 27001/27002, ISO 31000, COBIT and unified compliance frameworks.
• Ability to translate exposure into business risk and executive action.

Responsibilities

• Define and execute global Security Compliance strategy, roadmap, and operating model.
• Lead a globally distributed, capability-led organization to sustain GRC operations.
• Own policy compliance enforcement, backlog reduction, and risk acceptance.
• Build risk intelligence with dashboards and executive reporting.

Skills

Cyber security

Technology risk

GRC operations

Policy compliance

Risk assessment

Executive communication

Education

Bachelor's degree or equivalent in cyber security or related field

Relevant professional certifications (ISO 27001/27002, COBIT, ISO 31000)

Job description

EY is seeking a Director of Global Lead Security Compliance & Enforcement to shape strategy and operating model across Technology Assurance, Risk & Policy. You will lead a globally distributed team delivering proactive governance and audit-ready outcomes.

This role partners with CTOs and risk leaders to balance policy with business impact, set multi-year roadmaps, and evolve enforcement capabilities in frontier AI and DataGuard obligations, while maintaining strong executive reporting.