Hybrid Director of Cyber Risk & Governance

Advance Stores Company Inc (500); Raleigh (NC); Hybrid; USD 180,000 - 260,000; Full time

Job summary

Advance Auto Parts seeks a Director of Governance and Risk to define and deploy governance and risk management frameworks across the company. The role reports to the CISO and will oversee policy, standards, and regulatory compliance while guiding risk discussions with the Board and ERM.

The incumbent will lead a cyber risk team, drive risk assessments including PCI-DSS/SOX, and oversee VRM and metrics programs.

Qualifications

• Bachelor’s degree in information security, Computer Science, or a related field.
• Minimum of 12 years of experience in cybersecurity, with a focus on risk management.
• Expert in the implementation and operational management of OneTrust, working knowledge of Service Now, and Auditboard.
• Process driven with knowledge of cyber risk management frameworks, tools, and methodologies
• Ability to tell a story through PowerPoint leveraging metrics for the Enterprise level (Board, ERM)
• Proven experience in senior leadership roles, managing teams, and influencing executives
• Experience establishing and managing regulatory compliance in NIST, PCI-DSS, SOX, SOC 1/2, CCPA, HIPAA
• Deep understanding in cybersecurity metrics programs that are meaningful and risk/risk posture reporting
• Strategic thinker with strong understanding of cyber risks and mitigation options
• Exceptional communication and executive level presentation skills

Responsibilities

• Develop a short and long term Governance and Risk Management Strategy.
• Create and implement enterprise security policy, standards, procedures, and guidelines.
• Provide strategic guidance to the CISO for risk representation to Board and ERM.
• Lead a cyber team and support their development.
• Conduct risk assessments including PCI-DSS and SOX; develop risk management plans.
• Support Internal Audit with technology-focused engagements.
• Oversee Vendor Risk Management and third-party monitoring.
• Identify, evaluate, and prioritize cyber risks across the organization.
• Oversee cyber risk metrics, KPIs, KRIs, and reporting.
• Drive automation, analytics, and continuous process improvements.
• Engage senior stakeholders across Lines of Defense for oversight.
• Collaborate with cross-functional teams on risk remediation.
• Ensure regulatory compliance with NIST, PCI-DSS, SOX, SOC 1/2, CCPA, HIPAA
• Maintain security policy compliance reporting platform.

Skills

Cybersecurity leadership

Risk management

Executive stakeholder mgmt

PowerPoint storytelling

Security metrics

Regulatory compliance

Team leadership

Communication skills

Education

Bachelor’s degree in information security/CS

Master’s degree preferred

Tools

OneTrust

ServiceNow

Auditboard

Job description

Advance Auto Parts seeks a Director of Governance and Risk to define and deploy governance and risk management frameworks across the company. The role reports to the CISO and will oversee policy, standards, and regulatory compliance while guiding risk discussions with the Board and ERM.

The incumbent will lead a cyber risk team, drive risk assessments including PCI-DSS/SOX, and oversee VRM and metrics programs.