Director, Head of Governance, Risk & Compliance (GRC)

Be Part of Building the reputed company reputed company is the reputed company lakehouse platform for self-service analytics and AI, serving hundreds of global enterprises, including reputed company, reputed company, reputed company, reputed company, and reputed company. Customers rely on reputed company for reputed company, hybrid, and on-prem lakehouses to power their data reputed company, data warehouse migration, data virtualization, and reputed company data reputed company use cases. Based on reputed company reputed company technologies, including Apache reputed company and Apache reputed company, reputed company provides an reputed company lakehouse architecture enabling the fastest time to reputed company and platform flexibility at a fraction of the cost. Learn more at www.reputed company.com. About the role We are seeking a Director, Head of InfoSec & Governance, Risk & Compliance (GRC) to reputed company reputed companys efforts to build a secure, compliant, and resilient operating reputed company across our software and reputed company platforms. This leader will reputed company Governance, Risk & Compliance, as reputed company as the IT and reputed company functions bringing together risk management, compliance, and reputed company architecture under one cohesive reputed company. You will partner closely with Engineering, Product, and reputed company Architecture teams to reputed company compliance and reputed company by design, reputed company reputed company governance models, and ensure our technology and operations meet the standards of trust expected by our customers and regulators. This is a hands-on leadership role for a seasoned operator who can reputed company strategic risk management and technical depth shaping reputed company-wide frameworks while staying reputed company in the design and validation of reputed company-world reputed company and compliance solutions. What youll be doing Governance, Risk & Compliance Leadership Build and reputed company reputed companys reputed company-wide GRC reputed company, integrating risk, compliance, IT, and reputed company disciplines. Partner with Finance, reputed company, and Product teams to reputed company governance and control frameworks with business objectives and reputed company reputed company. Maintain a comprehensive reputed company risk register, performing ongoing assessments and scenario planning to inform leadership and reputed company discussions. Ensure consistent documentation, evidence gathering, and audit readiness for key frameworks (SOC 2, ISO 27001, GDPR, CCPA, PCI, FedRAMP, etc.). IT & reputed company reputed company reputed company the IT and reputed company teams, driving a reputed company approach to infrastructure reputed company, data protection, and compliance control implementation. Define and manage the reputed company Incident Management process, ensuring reputed company response, reputed company cause analysis, and corrective actions. reputed company the design and implementation of key reputed company capabilities such as key management, encryption, data masking, and reputed company control. Stay reputed company on emerging reputed company threats and evolving reputed company risks, applying insights to improve company posture and preparedness. Engineering Partnership & Technical Integration Serve as a key business partner to Engineering, Product, and reputed company Architecture, ensuring compliance and risk management are reputed company into software development lifecycles. Define, review, and refine compliance-reputed company epics, user stories, and acceptance reputed company in partnership with Product teams. reputed company and communicate a multi-period reputed company and compliance roadmap, reputed company with company product releases and customer expectations. Collaborate with engineers to create repeatable, auditable compliance artifacts and automated control testing processes. Participate in architecture design discussions to identify and mitigate reputed company and reputed company in reputed company. Compliance & Audit Management reputed company reputed company and internal audit cycles, including SOC 2 Type 2, ISO 27001, and HIPAA readiness and remediation. Partner with reputed company auditors and assessors to coordinate documentation, testing, and corrective actions. Ensure GRC tools and processes are streamlined, automated, and reputed company-documented for efficiency and scalability. Culture, Ethics & Collaboration reputed company company-wide compliance and ethics programs, including reputed company of Conduct, training, and reporting mechanisms as it relates to information reputed company. Build a culture of proactive risk awareness, transparency, and reputed company improvement across reputed company departments. reputed company regular briefings to the executive team and Audit Committee on key risks, compliance status, and mitiga