Senior Director, AI & Privacy GRC Engineering

Eli Lilly and Company; Indianapolis (IN); On-site; USD 155,000 - 227,000; Full time

Benefits offered by this job

401(k) plan

Health, dental, vision benefits

Pension

Job summary

Eli Lilly and Company in Indianapolis seeks a Senior Director, GRC Engineer to translate privacy, AI, and data governance frameworks into auditable, automated controls across the enterprise.

You will lead the GRC design, maturity roadmap, and collaboration with Cyber Engineering, embedding privacy by design and AI by design throughout the lifecycle while partnering with DLO and business control owners.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical field.
• 10+ years of progressive experience in GRC, risk engineering, privacy engineering, or security architecture
• 5+ years of experience focused on control design, implementation, or assurance at an enterprise scale.
• Authorized to work in the United States on a full-time basis.

Responsibilities

• Own end-to-end design of DLO-owned privacy, AI, and data governance controls—translating regulatory obligations, policy requirements, and risk appetite into auditable, repeatable control architectures.
• Define and retain control design specifications for each control in the DLO GRC Framework, including test procedures, evidence requirements, data flows, and automation targets.
• Apply privacy-by-design and AI-by-design principles throughout the control engineering lifecycle, from inception through deployment and ongoing sustainment.
• Lead technical analysis to identify control gaps, design deficiencies, and automation opportunities; propose and drive remediation with appropriate urgency.
• Develop and publish design documentation, technical specifications, and implementation guides that create consistency in how controls are built and validated.
• Design control evidence outputs that directly feed KRI/KPI measurement—ensuring that what gets measured is a function of control design, not manual data collection.
• Be responsible for the DLO control maturity roadmap—a multi-year strategic plan defining how DLO-owned controls will evolve in response to regulatory change, technology advancement, and enterprise risk posture shifts.
• Synthesize inputs from GRC Analysts and KRI/KPI performance data to identify where controls are underperforming, immature, or misaligned to risk appetite—and translate findings into prioritized maturity initiatives.
• Lead strategic planning processes that translate the roadmap into prioritized, funded, and governed initiatives with clear milestones.

Skills

GRC

Risk engineering

Privacy engineering

Security architecture

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field

Tools

ServiceNow IRM

Job description

Eli Lilly and Company in Indianapolis seeks a Senior Director, GRC Engineer to translate privacy, AI, and data governance frameworks into auditable, automated controls across the enterprise.

You will lead the GRC design, maturity roadmap, and collaboration with Cyber Engineering, embedding privacy by design and AI by design throughout the lifecycle while partnering with DLO and business control owners.