Vice President, Security Controls & Compliance

TransUnion; Chicago (IL); On-site; USD 194,000 - 407,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Legal plan

Dependent coverage and FSA/HSA options

Paid parental leave

Job summary

TransUnion is seeking a senior executive to define and drive the enterprise cybersecurity governance and compliance program. You will shape policies, control frameworks, and operating processes aligned with business priorities and regulatory expectations.

You will lead global teams, communicate risk to executives and boards, and partner across Legal, Privacy, Risk, and Internal Audit to strengthen assurance and remediation across geographies.

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 10+ years of experience in cybersecurity, risk, compliance, governance, or audit leadership.
• 7+ years of experience leading global teams and large-scale cybersecurity programs.
• Experience presenting cybersecurity risk, compliance, and assurance matters to executives, regulators, and board-level committees.
• Certifications such as CISSP, CISM, CISA, CRISC, PCI ISA/QSA, or ISO 27001 Lead Auditor.

Responsibilities

• Define and execute the enterprise cybersecurity governance and compliance strategy, including policies, standards, control frameworks, and operating processes.
• Establish governance processes and metrics for leadership visibility into cyber risk, control effectiveness, and compliance posture.
• Oversee global cybersecurity compliance programs and readiness for regulatory examinations and external assessments.
• Serve as executive sponsor for cybersecurity audits, assessments, and examinations; drive timely remediation of findings.
• Lead enterprise cyber risk and control assessments and translate technical security issues into business risk discussions.
• Modernize cyber governance, risk, and compliance capabilities through automation and AI-enabled processes.
• Lead a global team responsible for governance, compliance, policy, audit coordination, and control assurance.

Skills

Governance

Regulatory compliance

Executive communication

Stakeholder management

Risk management

Education

Bachelor's degree in Cybersecurity or related field

Tools

GRC platforms

Automation tools

Job description

TransUnion's Job Applicant Privacy Notice Personal Information We Collect Your Privacy Choices Team Overview

The Governance & Compliance team is responsible for defining and executing TransUnion's global cybersecurity governance, compliance, audit, and control assurance strategy, ensuring alignment with business objectives, regulatory requirements, and the company's risk appetite. The team provides oversight of cybersecurity policies, regulatory compliance programs, audit management, control effectiveness, and enterprise cyber risk reporting while partnering across Technology, Product, Legal, Privacy, Risk, and Internal Audit functions. This role reports to the Senior Vice President, Governance, Risk & Compliance and plays a key leadership role in advancing a modern, scalable, and data-driven cybersecurity governance program. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview and Core Responsibilities

Define and execute the enterprise cybersecurity governance and compliance strategy, including policies, standards, control frameworks, and operating processes that align with business priorities and risk appetite.

Establish governance processes and metrics that give executive leadership, regulators, and the Audit Committee clear visibility into cyber risk, control effectiveness, compliance posture, audit results, and emerging risks.

Oversee global cybersecurity compliance programs and readiness for regulatory examinations, external assessments, contractual obligations, and requirements including PCI DSS, SOX, NIST CSF, ISO 27001, privacy regulations, and customer security expectations.

Serve as executive sponsor for cybersecurity audits, assessments, and examinations; partner with Internal Audit and business stakeholders to strengthen assurance and drive timely remediation of findings and control deficiencies.

Lead enterprise cyber risk and control assessments, identify gaps, prioritize remediation, and establish accountability mechanisms that support risk reduction and issue closure.

Translate technical security issues into business-focused risk discussions and ensure material cybersecurity risks are appropriately communicated and escalated.

Modernize cyber governance, risk, and compliance capabilities through automation, modern GRC platforms, and AI-enabled processes that improve scale, consistency, and decision support.

Lead and develop a global team responsible for governance, compliance, policy, audit coordination, and control assurance, fostering accountability, transparency, innovation, and operational excellence.

Build strong partnerships across Technology, Product, Legal, Privacy, Risk, Internal Audit, and business functions to address evolving regulatory requirements and enable enterprise‑wide change.

Required Knowledge and Experiences

• Bachelor’s degree in Cybersecurity, Information Technology, Business, Risk Management, or a related field, or equivalent experience and knowledge relevant to leading enterprise cybersecurity governance and compliance.
• 10+ years of experience in cybersecurity, risk, compliance, governance, or audit leadership roles, with deep knowledge of governance frameworks, regulatory requirements, and control standards.
• 7+ years of experience leading global teams and large-scale cybersecurity programs across complex organizations.
• Experience presenting cybersecurity risk, compliance, and assurance matters to executive leadership, regulators, and board‑level committees.
• Proven ability to influence senior stakeholders, build cross‑functional partnerships, and drive enterprise‑wide change initiatives.

Required Technical Skills

• Working knowledge of PCI DSS (Payment Card Industry Data Security Standard), SOX (Sarbanes‑Oxley Act), NIST CSF (National Institute of Standards and Technology Cybersecurity Framework), and ISO/IEC 27001.
• Experience with cyber GRC (Governance, Risk, and Compliance) platforms used to manage controls, assessments, issues, policies, and compliance obligations.
• Ability to develop and interpret key risk indicators, control‑effectiveness metrics, executive dashboards, and regulatory or Audit Committee reporting.
• Knowledge of automation and AI‑enabled governance processes that improve oversight, evidence collection, reporting, and control assurance.

We’re also looking for the preferred skills below.

• Financial services or other highly regulated industry experience.
• Experience leading cybersecurity compliance programs across multiple regulatory environments and geographies.
• Experience implementing modern GRC platforms and AI‑enabled governance processes.
• Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), PCI ISA/QSA, or ISO 27001 Lead Auditor.

Benefits that support every part of your life

• For Your Health: Enjoy day‑one eligibility for medical, dental, and vision coverage, plus supplemental plan options. Spousal, domestic partner, and other eligible dependent coverage is available on select plans. Choose tax‑advantaged HSA and FSA accounts to make everyday care more affordable.
• For Your Protection: We’ve got your back with company‑paid basic life and AD&D, optional voluntary life and AD&D for you and your family, and short‑ and long‑term disability. You can also opt into a legal plan, pet insurance, and travel accident coverage.
• For Your Family: From adoption assistance and fertility planning coverage to caregiver support, we’re here for every chapter. Access Dependent Care FSA for possibility of an employer match, a complimentary Care@Work membership, and up to 12 weeks of paid parental leave with eligibility for a thoughtful, gradual return.
• For Your Future: Build toward what’s next with our 401(k) with employer match and Employee Stock Purchase Plan (ESPP). Tap financial wellness resources, career coaching, and optional long‑term care insurance to plan confidently.
• For You: Grow and recharge with tuition reimbursement, flexible time off for exempt employees or paid time off for nonexempt employees, up to 12 paid holidays per year, commuter benefits, employee discounts, charitable gift matching, and paid volunteer time off, plus corporate volunteer events that make it easy to give back.
• For Your Wellness: Access 24/7 support including professional therapy, coaching, and emotional well‑being programs alongside guided meditation and resources that support physical, mental, social, and financial wellness.

We are committed to being a place where diversity is not only present, it is embraced. As an equal opportunity employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, veteran status, genetic information, marital status, citizenship status, sexual orientation, gender identity or any other characteristic protected by law. Additionally, in accordance with Section 503 of the Rehabilitation Act of 1973 and the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, TransUnion takes affirmative action to employ and advance in employment qualified individuals with a disability and protected veterans in all levels of employment and develops annual affirmative action plans.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers, the San Francisco Fair Chance Ordinance, Fair Chance Initiative for Hiring Ordinance, and the California Fair Chance Act. Adherence to Company policies, sound judgment and trustworthiness, working safely, communicating respectfully, and safeguarding business operations, confidential and proprietary information, and the Company’s reputation are also essential expectations of this position.

Pay Scale Information

The U.S. base salary range for this position is $193,500.00 - $406,500.00. The salary range for this position reflects a reasonable estimate of the range of compensation for this job. At TransUnion, actual compensation is based on careful consideration of additional factors such as (but not limited to) an individual’s education, training, work experience, job‑related skill set, location, and industry knowledge, as well as the scope and responsibilities of the position and market considerations. Regular, fulltime non-sales positions may be eligible to participate in TransUnion’s annual bonus plan. Certain positions may be also eligible for long‑term incentives and other payments based on applicable company guidance and plan documents.

TransUnion Overview

At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver’s seat of their professional development— while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that’s why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our Workforce for Good – you’ll work with great people, pioneering products and cutting‑edge technology.

TransUnion's Internal Job Title: VP, Governance Risk and Compliance Company: TransUnion LLC

View TransUnion's Job Applicant Privacy Notice

TransUnion is a global information and insights company with over 12,000 associates operating in more than 30 countries. We make trust possible by ensuring each person is reliably represented in the marketplace. We do this with a Tru picture of each person: an actionable view of consumers, stewarded with care. Through our acquisitions and technology investments we have developed innovative solutions that extend beyond our strong foundation in core credit into areas such as marketing, fraud, risk and advanced analytics. As a result, consumers and businesses can transact with confidence and achieve great things. We call this Information for Good — and it leads to economic opportunity, great experiences and personal empowerment for millions of people around the world.