Sr. Director, Governance, Risk, and Compliance (GRC)

Brobston Group LLC; Seattle (WA); On-site; USD 180,000 - 260,000; Full time

Job summary

Brobston Group LLC in Seattle seeks a Senior Director of Governance, Risk, and Compliance (GRC) to design, build, and mature an enterprise-wide GRC function enabling secure growth and digital transformation.

You will partner with the CISO and executives to translate cybersecurity, regulatory, and enterprise risks into actionable insights and executive-level reporting, oversee audits and vendor risk, and lead a high-performing GRC team.

Qualifications

• 10+ years in GRC, information security, or enterprise risk.
• 5+ years in senior leadership roles.
• Experience turning risk into executive-level insights.

Responsibilities

• Develop and mature an enterprise GRC strategy aligned to risk appetite.
• Lead governance, risk, and compliance programs across cyber, IT, third-party, and operational domains.
• Oversee internal and external audits, remediation tracking, and continuous compliance readiness.
• Drive executive- and Board-level risk reporting, dashboards, and metrics.
• Partner with Legal, Technology, Finance, HR, and business leaders to embed risk management into initiatives and vendor relationships.
• Evaluate and optimize GRC platforms and automation to scale risk and compliance management.

Skills

Executive leadership

GRC program development

Cyber risk

Regulatory compliance

Tools

ServiceNow GRC

Archer

OneTrust

Job description

Summary

The Senior Director, Governance, Risk, and Compliance (GRC) leads the design, build, and maturation of an enterprise-wide GRC function to enable secure growth and digital transformation. This senior leader partners with the CISO and cross-functional executives to translate cybersecurity, regulatory, and enterprise risks into actionable insights and executive-level reporting. The role oversees audit activities, vendor risk, and GRC tooling while developing a high-performing team and continuous readiness practices.

Responsibilities

• Develop and execute an enterprise GRC strategy aligned to business priorities and risk appetite
• Lead governance, risk, and compliance programs across cyber, IT, third-party, and operational domains
• Oversee internal and external audits, remediation tracking, and continuous compliance readiness
• Drive executive- and Board-level risk reporting, dashboards, and metrics
• Partner with Legal, Technology, Finance, HR, and business leaders to embed risk management into initiatives and vendor relationships
• Evaluate and optimize GRC platforms and automation to scale risk and compliance management

Requirements

• 10+ years of progressive GRC, information security, or enterprise risk experience, including 5+ years in senior leadership
• Proven experience building, scaling, or transforming enterprise GRC programs in complex, regulated environments
• Deep expertise in cybersecurity risk, IT risk, third-party risk, and regulatory compliance frameworks
• Experience with GRC platforms and automation tools (e.g., ServiceNow GRC, Archer, OneTrust)
• Strong executive presence, cross-functional leadership, and ability to translate risk into business-relevant outcomes