GRC Director: InfoSec, Privacy & Compliance Leader

Taft Stettinius & Hollister LLP

Cincinnati (OH)

On-site

USD 140,000 - 210,000

Full time

9 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Taft Stettinius & Hollister LLP seeks a Director of Governance, Risk & Compliance to mature the firm’s information security GRC and assurance programs. You will own the ISO/IEC 27001 ISMS, coordinate privacy governance, and lead AI governance initiatives in collaboration with Legal, IT, and business stakeholders.

Responsibilities include setting multi‑year GRC roadmaps, managing control ownership, and coordinating internal/external audits and certifications.

Qualifications

Bachelor’s degree in Information Security or related field.
10+ years of professional experience in information security, governance, risk, or compliance.
Experience leading ISO/IEC 27001 ISMS implementations and certifications.
Strong written and verbal communication skills.

Responsibilities

Oversee the firm’s cybersecurity governance, risk, compliance, and assurance programs.
Develop and maintain an integrated control framework aligning standards, regulatory requirements, contractual obligations, and client requirements.
Lead the ISO/IEC 27001 ISMS operation and certification process.
Lead privacy governance programs aligned with privacy standards and regulations.
Oversee AI governance initiatives and ISO/IEC 42001 readiness where applicable.
Coordinate third‑party risk management and client assurance activities.
Advise the CISO on material compliance gaps and risk trends.