Global Security Compliance & Enforcement Director

EY; Atlanta (GA); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

High compensation and benefits

Paid time off

Job summary

EY is seeking a Director to lead Global Lead Security Compliance & Enforcement within Technology Assurance. You will shape strategy, operating model, and governance for proactive, audit-ready security compliance across the organization.

The role requires 12+ years of enterprise GRC/ security experience, global leadership, and the ability to translate complex risk into executive decisions. Hybrid work and strong compensation are provided.

Qualifications

• Deep knowledge of cyber security, technology and data risk, policy compliance, and GRC operations.
• Understanding of ISO 27001/27002, ISO 31000, COBIT; audit-ready control obligations.
• Ability to translate risk data into business decisions for executives.
• Experience designing global operating models and governance structures.
• Strong judgment in enforcement, escalation, remediation prioritization, and risk acceptance.

Responsibilities

• Define and execute the global Security Compliance strategy and multi-year roadmap.
• Lead a globally distributed, capability-led organization and manage enforcement programs.
• Build risk intelligence, dashboards, and executive reporting for compliance posture.
• Governance for frontier AI, DataGuard obligations, and technology-lifecycle risk.
• Engage with senior stakeholders to balance policy with business impact and delivery.

Skills

Cyber security knowledge

ISO 27001/27002 knowledge

Policy compliance

Risk governance

Executive communication

Global operating models

Education

Relevant degree in cyber security or risk management

Job description

EY is seeking a Director to lead Global Lead Security Compliance & Enforcement within Technology Assurance. You will shape strategy, operating model, and governance for proactive, audit-ready security compliance across the organization.

The role requires 12+ years of enterprise GRC/ security experience, global leadership, and the ability to translate complex risk into executive decisions. Hybrid work and strong compensation are provided.