Director of GRC – Security Governance, Risk & Compliance

About the role

We are seeking a visionary Director of GRC to shape and mature the global Information Security Governance, Risk & Compliance function for a leading luxury retail and distribution group. Reporting to the VP of Information Security, you will join the cybersecurity leadership team and influence enterprise‑wide security strategy across multiple countries.

Key responsibilities

• Define and execute the enterprise GRC strategy, aligning with executive leadership, legal, audit, procurement, HR and technology functions.
• Lead the design, implementation and continuous improvement of security governance, risk management and compliance programmes worldwide.
• Drive regulatory compliance, internal and external audit readiness, and third‑party risk management across the organization.
• Partner with C‑level stakeholders and board members to embed cyber‑resilience into business decisions.
• Oversee the adoption of industry frameworks and standards, ensuring consistent application across all regions.

Required profile

• Proven experience building or transforming an enterprise‑level Information Security GRC function.
• Background in large multinational or global organisations with multi‑country GRC programmes.
• Strong executive presence and ability to influence C‑suite and board audiences.
• Deep knowledge of information security governance, enterprise risk and regulatory landscapes.

Required skills

• ISO 27001
• NIST / NIST CSF
• PCI DSS
• Enterprise Risk Management frameworks
• Third‑Party Risk Management (TPRM)

What we offer

• Competitive tax‑free salary with annual performance bonus.
• Comprehensive medical, life insurance and schooling allowance for eligible dependants.
• Relocation support including visa, flights and temporary accommodation.
• Hybrid working model and generous annual leave.