SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Tricentis is seeking a Director of Security Governance, Risk and Compliance to lead a global team within Information Security. This strategic leadership role reports directly to the Chief Information Security Officer and combines hands-on execution with people leadership.
You will lead and manage a team overseeing security governance, risk, compliance, customer trust, and privacy activities. Key responsibilities include:
• Directly manage security policies, procedures, and controls to maintain compliance with applicable regulations
• Develop and implement a comprehensive information security risk management program, including risk strategy, self-assessment, and analysis
• Foster relationships with internal stakeholders, external auditors, and vendors while managing M&A due diligence
• Oversee data governance, product certification, and compliance efforts to align with regulatory controls
• Configure and maintain GRC tools for compliance evidence collection and risk management
• Collaborate on ISO 27701 certification, lead security audits, and refine policies to meet evolving regulatory requirements
• Support sales and marketing with certification roadmaps and compliance reporting
• Create and manage security M&A due diligence plans
• Drive operational changes using influence and technology to build unity across divisions
• Leverage AI and other technologies to reduce compliance overhead
• Partner with engineering, product, and customer-facing teams to create effective, compliant processes
You are an empathetic leader comfortable at both strategic and tactical levels. You can work directly with individual contributors while preparing reporting for senior leadership. You have high-level familiarity with security concepts and standard development frameworks (Security Operations, Corporate Security, DevSecOps). You are comfortable interacting with external stakeholders such as CTOs, CISOs, and VPs of Procurement.
QUALIFICATIONS:
Required Experience:
• 10+ years in Governance, Risk, and Compliance or related field, with at least 3-5 years in a leadership or managerial position
• Extensive experience managing security policies, procedures, and controls in complex, highly regulated environments
• Proven track record leading audit activities, including internal assessments, external compliance audits, and third-party vendor management
• Experience developing and implementing risk management programs, incident response strategies, and data governance
• Strong understanding of industry standards and regulatory frameworks: GDPR, HIPAA, SOC 2, ISO 27001, ISO 27701, ISO 9001, ISO 42001, DORA, NIST
• Strong understanding of Secure Controls Framework (SCF) and experience implementing, monitoring, and continuously improving security controls
• Experience working closely with executive leadership, product teams, legal counsel, and external auditors
• Strong communication and leadership skills to influence decision-making and drive operational change
Preferred Certifications/Experience:
• GxP / FDA / ICH (leading certification efforts)
• FedRamp / FISMA (leading certification efforts)
• Sarbanes-Oxley Act (SOX) and financial reporting audits
• LogicGate Administration
• Information security certifications: CISA, CISM, CRISC, CISSP
• CIPP/e or CIPP/us
• HIPAA & HITECH (leading certification efforts)
Note: This role is not eligible for employer-sponsored work visas. Applicants must be authorized to work in the U.S. without current or future sponsorship.
