Director – Cybersecurity GRC

Job not on LinkedIn

🔥 13 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DLS Discovery, LLC

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2018

⚖️ Legal

🏢 Enterprise

📋 Compliance

Legal • Enterprise • Compliance

DLS Discovery, LLC is a leading provider of eDiscovery, managed document review, and trial and legal support services. Based in Wilmington, Delaware, the company has built a strong reputation by supporting AM Law100 law firms, Fortune 500 companies, as well as national and local law firms and corporations. Known for its individualized approach, DLS Discovery emphasizes communication and custom-fit technological solutions to enhance the efficiency and effectiveness of its services. The company offers a wide range of services including forensic collections, document hosting, analytics, trial support, litigation support, and more, all while focusing on innovative ways to preserve resources and save clients money.

📋 Description

• Own and mature the cyber risk register, transitioning from qualitative to quantitative risk assessment • Define and maintain the cyber risk appetite and tolerance framework with the CISO • Lead governance structures, policy lifecycle, RACI design, and security steering committee support • Standardize policies and procedures across the business • Own the annual compliance calendar and manage external assessor relationships • Build and maintain continuous audit-ready compliance evidence • Oversee GRC platform strategy, automated evidence collection, continuous controls testing, and real-time compliance monitoring • Conduct readiness reviews, internal controls testing, and post-audit findings management • Lead technical control validation • Monitor regulatory changes and assess certification needs • Transform GRC operations through AI and automation, including evidence gathering, controls mapping, compliance monitoring, risk quantification, anomaly detection, audit automation, questionnaire automation, vendor risk tooling, and policy workflow automation • Maintain a unified cyber framework approach across ISO, SOC 2, NIST, and HIPAA • Oversee Client Trust, including Trust Center strategy, security questionnaires, and client audit support • Own Vendor Risk Management, including third-party tiering, assessments, due diligence, and remediation tracking • Engage enterprise clients and prospects on security posture, due diligence, and audit inquiries • Direct the company-wide security awareness and training program • Lead, develop, and performance-manage a lean GRC team across three pillars • Partner with the Director of Cybersecurity Operations as a unified cyber function reporting to the CISO • Report program health, risk posture, and compliance status to the CISO

🎯 Requirements

• 15+ years of progressive experience in information security, with a minimum of 7 years in a GRC leadership role • Demonstrated ownership of multi-framework compliance programs at a Director or equivalent level • Proven track record managing external assessor relationships (Big 4 or specialist assessors preferred) • Hands-on experience deploying or significantly maturing a GRC platform (AuditBoard, ServiceNow GRC, Archer, Vanta, or equivalent) • Demonstrated experience implementing AI or automation within a GRC or compliance function • Deep working knowledge of NIST SP 800-171, NIST CSF, ISO 27001:2022, SOC 2, PCI DSS, GDPR, and HIPAA Security Rule • Understanding of technical security controls sufficient to evaluate control design and operating effectiveness • Familiarity with cloud-native architectures and compliance strategies for SaaS-heavy environments • Bachelor's degree in Information Security, Computer Science, Business, or a related field required • Professional certifications such as CISSP, CISA, CRISC, CISM, or GIAC • Exceptional communication, collaboration, client-facing, business judgment, continuous learning, discretion, and confidentiality abilities