Security Governance & Compliance Leader

super; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical insurance

Open annual leave

Employee assistance programme

Training & development support

Job summary

super is seeking a senior information security governance leader to own company-wide policy, risk, and compliance for a multi-market sports, gaming, and fan-experiences technology organisation. This role emphasizes governance, awareness, and board-level reporting rather than hands-on engineering.

You will drive the policy framework, lead security training programs, coordinate audits, and ensure alignment with ISO 27001 and GDPR across diverse teams and regions.

Qualifications

• Proven experience in information security governance, risk, and compliance (GRC) in a regulated, multi-market environment.
• Deep knowledge of ISO 27001, GDPR, and related security standards.
• Experience owning security policy frameworks and running awareness programs.
• Hands-on experience operating a GRC platform and driving cross-team compliance.

Responsibilities

• Own and maintain the company-wide information security policy framework and alignment with business needs.
• Update the security compliance strategy and operate the GRC platform across the organization.
• Design and deliver security awareness and training programmes for different teams.
• Drive compliance adoption across business units and close gaps proactively.
• Track policy exceptions and remediation progress.
• Coordinate with external auditors and provide regular compliance reporting to leadership and risk committees.

Skills

GRC knowledge

Policy & compliance

Stakeholder management

Audit coordination

Security awareness

Tools

GRC platform

Job description

super is seeking a senior information security governance leader to own company-wide policy, risk, and compliance for a multi-market sports, gaming, and fan-experiences technology organisation. This role emphasizes governance, awareness, and board-level reporting rather than hands-on engineering.

You will drive the policy framework, lead security training programs, coordinate audits, and ensure alignment with ISO 27001 and GDPR across diverse teams and regions.