Global Security Compliance & Enforcement Director

EY; Secaucus (NJ); Hybrid; USD 212,000 - 444,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Total Rewards package (medical, dental

Job summary

EY in the United States seeks a strategic leader for Global Lead Security Compliance & Enforcement within Technology Assurance, Risk & Policy. You will set the global strategy, lead a distributed team, and drive policy, risk, and remediation initiatives to protect client trust and operational resilience.

Reporting to the Global Leader, Technology Assurance, Risk & Policy, you will partner with risk, audit, and technology teams to deliver executive-ready governance, measurement, and enforcement

Qualifications

• Demonstrated ability to lead a global security compliance, technology risk, control assurance, or GRC function of comparable complexity and strategic scope.
• Experience resolving complex cross-functional issues through data, policy, risk appetite, escalation protocols, and executive decision forums.
• Experience directing policy-compliance enforcement, non-compliance remediation, control monitoring, and risk-acceptance processes.
• Ability to engage directly with executive technology, quality, risk, security, service-line, audit, and governance stakeholders.

Responsibilities

• Define and execute the global Security Compliance strategy, target operating model, multi-year roadmap, priorities, performance measures, and resource plan.
• Lead a globally distributed, capability-led organization that proactively addresses high-risk exposures while sustaining GRC operations.
• Own global policy compliance and the Non-Compliance Consequence Framework, including enforcement and backlog reduction.
• Build data-driven risk intelligence with dashboards, executive reporting, and risk burn-down tracking.
• Establish compliance governance for frontier AI, DataGuard obligations, and evolving technologies.
• Partner with CTOs, risk leaders, audit, governance, and technology teams to balance policy with business impact.

Skills

Cyber security

Technology risk

GRC operations

Executive communication

Education

Bachelor's degree in cyber security or information security

Certifications aligned with ISO 27001/27002, ISO 31000, COBIT

Job description

EY in the United States seeks a strategic leader for Global Lead Security Compliance & Enforcement within Technology Assurance, Risk & Policy. You will set the global strategy, lead a distributed team, and drive policy, risk, and remediation initiatives to protect client trust and operational resilience.

Reporting to the Global Leader, Technology Assurance, Risk & Policy, you will partner with risk, audit, and technology teams to deliver executive-ready governance, measurement, and enforcement