Global Security Compliance & Enforcement Director

Ernst & Young Oman; Hartford (CT); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

EY seeks a Director of Global Lead Security Compliance & Enforcement within Technology Assurance, Risk & Policy. You will define strategy, operating model, and a multi-year roadmap for security compliance across the firm, balancing policy with business impact and risk.

You will lead a distributed team and deliver risk-informed insights to senior leadership. With 12+ years in security compliance or GRC at enterprise scale, you will drive enforcement, monitoring, and remediation initiatives while

Qualifications

• Deep knowledge of cyber security, technology and data risk, policy compliance, control assurance, GRC operations, enterprise remediation, exception governance, and risk acceptance.
• Practical understanding of ISO 27001/27002, ISO 31000, COBIT, unified compliance frameworks, audit expectations, and enterprise control obligations.
• Ability to translate technical exposure and compliance data into business risk, executive action, documented decisions, and measurable risk reduction.
• Proven capability to design and lead global operating models, portfolio governance, monitoring, evidence, metrics, dashboards, executive reporting, and automation enablement.

Responsibilities

• Lead global security compliance strategy, multi-year roadmap, and governance in alignment with risk appetite and business objectives.
• Oversee a distributed, capability-led organization to address high-risk exposures while sustaining GRC operations.
• Manage enforcement, backlog reduction, and risk acceptance across the enterprise.

Job description

EY seeks a Director of Global Lead Security Compliance & Enforcement within Technology Assurance, Risk & Policy. You will define strategy, operating model, and a multi-year roadmap for security compliance across the firm, balancing policy with business impact and risk.

You will lead a distributed team and deliver risk-informed insights to senior leadership. With 12+ years in security compliance or GRC at enterprise scale, you will drive enforcement, monitoring, and remediation initiatives while