Global Security Compliance & Enforcement Director

Ernst & Young Oman; Secaucus (NJ); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking a seasoned Director to own the global Security Compliance strategy within Technology Assurance, Risk & Policy. You will lead a distributed team, turning fragmented risk into prioritized action and ensuring audit-ready governance that aligns with risk appetite and business needs.

You will set the multi-year roadmap, oversee enforcement, and drive AI governance and DataGuard obligations, collaborating with CTOs, risk, and audit teams to deliver measurable risk reduction and resilient

Qualifications

• Deep knowledge of cyber security, technology and data risk, policy compliance, control assurance, GRC operations.
• Practical understanding of ISO 27001/27002, ISO 31000, COBIT, unified compliance frameworks.
• Ability to translate technical exposure and compliance data into business risk, executive action, documented decisions, and measurable risk reduction.

Responsibilities

• Define and execute the global Security Compliance strategy, target operating model, multi-year roadmap, priorities, performance measures, and resource plan in alignment with risk appetite and business objectives.
• Lead and develop a globally distributed, capability-led organization that proactively addresses the highest-risk exposures while sustaining business-as-usual GRC operations and talent succession.
• Own global policy compliance and the Non-Compliance Consequence Framework, including consistent enforcement, escalation, investigation, corrective action, backlog reduction, and documented risk acceptance.
• Build data-driven risk intelligence and expand control monitoring and assurance through clear evidence, metrics, trends, dashboards, executive reporting, and risk burn-down tracking.
• Establish compliance governance, monitoring, accountability, and reporting for frontier AI, DataGuard, and other emerging-technology obligations.

Skills

Cyber security

ISO 27001/27002

GRC operations

Executive communication

Global operating models

Risk analytics

Education

Cyber security/Information security degree

Job description

EY is seeking a seasoned Director to own the global Security Compliance strategy within Technology Assurance, Risk & Policy. You will lead a distributed team, turning fragmented risk into prioritized action and ensuring audit-ready governance that aligns with risk appetite and business needs.

You will set the multi-year roadmap, oversee enforcement, and drive AI governance and DataGuard obligations, collaborating with CTOs, risk, and audit teams to deliver measurable risk reduction and resilient