Senior Director, Technology GRC (Cybersecurity)

Location: London, England, United Kingdom. Hybrid work opportunities are available.

Company

hirify.global is a global enterprise software company with over $1 billion in revenue and more than 7,000 employees, developing AI-driven software solutions.

What you will do

• Develop and execute the Technology GRC strategy and roadmap for Cloud, Product and Technology.
• Establish governance forums, decision rights, risk ownership, escalation routes, reporting and accountability.
• Embed cybersecurity, data protection, compliance and responsible AI controls into product, engineering, cloud and technology lifecycles.
• Oversee technology control assessments, evidence reviews, audits, certifications, remediation and risk acceptance.
• Strengthen customer assurance by maintaining accurate control design, operating evidence and clear accountability.
• Lead and develop a multidisciplinary Technology GRC team and influence senior technical and non-technical stakeholders.

Requirements

• Significant leadership experience in technology GRC, cybersecurity governance, product security, cloud compliance, data protection or a related discipline.
• Experience designing and implementing GRC programs in a software, SaaS, cloud or technology-led organization.
• Strong understanding of cybersecurity and data-protection requirements across product development, technology operations and cloud services.
• Experience establishing technology control frameworks and supporting audits, certifications, customer assurance and remediation programs.
• Working knowledge of ISO 27001, SOC 2, NIST, GDPR, CCPA and FedRAMP requirements, where applicable.
• Experience integrating security, privacy and compliance controls into product development or technology-delivery lifecycles.
• Experience governing AI/ML, generative AI or other emerging technologies within products or technology environments.
• Strong risk-assessment and governance experience, including risk acceptance, control exceptions, remediation and executive escalation.
• Ability to advise and influence senior Product, Engineering, Cloud and Technology leaders, lead multidisciplinary teams, and translate technical, regulatory and risk requirements into clear business decisions.

Nice to have

• Experience with enterprise software, SaaS or cloud services serving highly regulated or security-conscious customers.
• Experience supporting SOC 2, ISO 27001, FedRAMP or similar assurance and certification programs.
• Familiarity with EU cybersecurity, data-protection and AI regulations.
• Experience with secure development, cloud-control assurance, product security or DevSecOps governance.
• Experience with responsible AI frameworks, AI risk management or governance of agentic and autonomous systems.
• Relevant certifications such as CISA, CISM, CISSP, CRISC, CGEIT, CDPSE, CIPM, CIPP/E, ISO 27001 Lead Implementer or ISO 27001 Lead Auditor.

Culture & Benefits

• Full-time role in a global, diverse and inclusive environment.
• Hybrid work opportunities designed to support flexibility and workplace connection.
• Work within a company focused on innovation, collaboration, trust and sustainability.