Senior Director Analyst – Cybersecurity Governance, Risk & Compliance

About the role

This senior position leads research and advisory services on cybersecurity governance, risk and compliance (GRC) for global enterprises. You will combine deep technical knowledge with strategic insight to help senior leaders navigate complex cyber‑risk landscapes and evolving regulations.

Key responsibilities

• Develop and publish forward‑looking research, frameworks, and guidance on Cybersecurity GRC.
• Advise enterprise leaders on risk identification, assessment, mitigation and governance best practices.
• Analyse market trends, emerging threats and regulatory changes to deliver actionable recommendations.
• Conduct client‑facing engagements such as virtual consultations, executive briefings, workshops and conference presentations.
• Lead discussions on compliance frameworks (GDPR, ISO 27001, NIST, PCI DSS, HIPAA, SOX, CCPA) and enterprise risk methodologies.
• Collaborate with cross‑functional teams to improve research quality and service delivery.
• Mentor junior analysts and foster a high‑performance knowledge‑sharing culture.

Required profile

• 12+ years of experience in Cybersecurity GRC, Information Security or Enterprise Risk Management, including leadership roles.
• Proven ability to advise senior executives and translate technical risk into business outcomes.
• Strong analytical and communication skills with a track record of thought leadership.

Required skills

• FAIR risk analysis methodology
• NIST RMF framework
• GDPR compliance
• ISO 27001 standard
• NIST cybersecurity framework
• PCI DSS requirements
• HIPAA regulations
• SOX compliance
• CCPA privacy law