Senior Director, Enterprise GRC & Risk Strategy

Brobston Group; Seattle (WA); On-site; USD 221,000 - 365,000; Full time

Benefits offered by this job

Medical/Vision, Dental, Retirement and

Paid Time Away

Life Insurance and Disability

Merchandise Discount and EAP Resources

Job summary

Nordstrom is seeking a Senior Director of Governance, Risk, and Compliance to lead an enterprise-wide GRC function. The role partners with the CISO and senior leaders to translate risk into strategic actions across Technology, Legal, Finance, and HR, ensuring secure growth and trusted customer experiences.

The role is based in Seattle, reporting to the Chief Information Security Officer, and requires a track record of building scalable GRC programs and delivering executive-level risk insights.

Qualifications

• 10+ years in governance, risk, compliance or enterprise risk
• 5+ years in senior leadership roles
• Experience building enterprise GRC programs in regulated environments
• Strong executive presence and ability to influence senior leaders
• Ability to translate risk into business-relevant outcomes

Responsibilities

• Shape and execute an enterprise-wide GRC strategy aligned to business priorities and risk appetite
• Lead governance, risk, and compliance programs across a complex, customer-facing organization
• Translate cybersecurity, regulatory, and enterprise risk into actionable insights for executives
• Oversee audit activities with timely remediation and continuous readiness
• Drive executive- and Board-level risk reporting through dashboards and metrics
• Partner with Legal, Technology, Finance, HR and business leaders to embed risk management

Skills

Executive presence

GRC expertise

Regulatory knowledge

Stakeholder management

Communication skills

Tools

ServiceNow GRC

Archer

OneTrust

Job description

Nordstrom is seeking a Senior Director of Governance, Risk, and Compliance to lead an enterprise-wide GRC function. The role partners with the CISO and senior leaders to translate risk into strategic actions across Technology, Legal, Finance, and HR, ensuring secure growth and trusted customer experiences.

The role is based in Seattle, reporting to the Chief Information Security Officer, and requires a track record of building scalable GRC programs and delivering executive-level risk insights.