Senior Director Analyst – Cybersecurity Governance, Risk & Compliance

About the role

This senior position leads research and advisory services on cybersecurity governance, risk and compliance (GRC) for global enterprises. You will combine deep technical knowledge with strategic insight to help senior leaders navigate complex cyber‑risk landscapes and evolving regulations.

Key responsibilities

• Develop and publish forward‑thinking research, frameworks and guidance on Cybersecurity GRC.
• Advise enterprise leaders on risk identification, assessment, mitigation and governance best practices.
• Analyse market trends, emerging threats and regulatory developments to deliver actionable recommendations.
• Conduct client‑facing engagements such as virtual consultations, executive briefings, workshops and conference presentations.
• Lead discussions on compliance frameworks (GDPR, ISO 27001, NIST, PCI DSS, HIPAA, SOX) and enterprise risk methodologies.
• Collaborate with cross‑functional teams to improve research quality and service excellence.
• Mentor junior analysts and foster a high‑performance knowledge‑sharing culture.

Required profile

• 12+ years of experience in Cybersecurity GRC, Information Security or Enterprise Risk Management, including leadership roles.
• Proven ability to advise senior executives and translate technical risk into business outcomes.
• Strong analytical and communication skills with a track record of thought leadership.

Required skills

• FAIR risk analysis methodology
• NIST RMF
• GDPR
• ISO 27001
• NIST framework
• PCI DSS
• HIPAA
• SOX