Global Security Compliance Director & Enforcement Lead

EY; Boston (MA); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY seeks a Director to lead Global Lead Security Compliance & Enforcement within Technology Assurance, Risk & Policy. You will shape the strategy, operating model, and outcomes, balancing policy with business impact while directing a distributed team to achieve prioritised remediation and governance on risk posture.

You will partner with CTOs, risk, audit and governance stakeholders to deliver a multi-year roadmap, monitor controls, and drive automation across the program.

Qualifications

• Deep knowledge of cyber security, technology and data risk, policy compliance, control assurance, GRC operations.
• Familiarity with ISO 27001/27002, ISO 31000, COBIT and unified compliance frameworks.
• Ability to translate technical exposure into business risk and executive actions.

Responsibilities

• Define and execute the global Security Compliance strategy and multi-year roadmap.
• Lead a globally distributed, capability-led organization.
• Own policy compliance enforcement and backlog reduction.
• Build data-driven risk intelligence with metrics, dashboards, and executive reporting.
• Establish governance for frontier AI, DataGuard obligations and emerging tech.

Skills

Cyber security

Technology risk

Policy compliance

GRC operations

Control assurance

Risk acceptance

ISO 27001/27002

ISO 31000

COBIT

Audit

Education

Bachelor's degree in cyber security or information security

Job description

EY seeks a Director to lead Global Lead Security Compliance & Enforcement within Technology Assurance, Risk & Policy. You will shape the strategy, operating model, and outcomes, balancing policy with business impact while directing a distributed team to achieve prioritised remediation and governance on risk posture.

You will partner with CTOs, risk, audit and governance stakeholders to deliver a multi-year roadmap, monitor controls, and drive automation across the program.