Director leading global Information Security Governance, Risk & Compliance strategy. At LeoLabs, overseeing cybersecurity initiatives protecting assets in commercial and government missions.
Responsibilities
Lead and mature the enterprise cybersecurity and GRC strategy — build scalable governance frameworks and ensure alignment with business goals.
Assess and mitigate organizational risk — conduct risk assessments, close compliance gaps, and drive remediation of vulnerabilities.
Ensure regulatory and contractual compliance — manage frameworks such as FedRAMP, CMMC, NIST, ISO 27001, GDPR, and others.
Oversee incident response and resilience — develop and execute response plans, lead cross-functional remediation, and report to executive leadership.
Partner across the enterprise — build collaboration with Legal, HR, IT, and Operations to embed security and compliance awareness.
Drive major transformation initiatives — including AI adoption risk frameworks, Post-Quantum Cryptography, and Zero Trust architecture implementation.
Requirements
10–12 years of related experience, with 5+ years in supervisory or program/project management roles.
Expertise in cybersecurity governance, risk management, and compliance frameworks (NIST 800-53/171, CMMC, ISO 27001, Cloud Security Alliance).
Strong grasp of cloud infrastructure, access controls, and change management.
Demonstrated experience with agile methodologies and organizational change management.
Excellent executive communication, analytical, and problem-solving skills.
Proven ability to manage competing priorities in a fast-paced, global environment.
Results-oriented with exceptional attention to detail and accountability.
Benefits
Global workforce: flexible remote/hybrid opportunities
Work on complex, meaningful missions with real-world impact
Unlimited paid time off for most roles
Competitive salary and equity packages
Comprehensive health, dental, and vision coverage
Access to the forefront of commercial space operations and defense innovation
Job title
Director of Information Security Governance, Risk, and Compliance, GRC
Senior Developer in Defensive Security for Clio, a leader in legal AI technology. Join a team to proactively tackle application security vulnerabilities and enhance security practices.
Intern role in emerging network systems at KBR Mission Technical Solutions. Focused on network interconnection problems and quality of service metrics in a collaborative environment.
Director of Product Security leading cybersecurity initiatives for medical devices at LivaNova. Ensuring patient safety and compliance with regulatory demands across product lifecycle.
Security Engineer driving modernization and improvements in KPMG's cybersecurity services. Engaging in technology evaluation, process innovation, and stakeholder communication.
Identity and Access Security Analyst at HII’s Newport News Shipbuilding focusing on SAP Security skills. Designing secure operating systems and conducting security assessments.
Senior Security Specialist ensuring compliance and security measures at Disney. Supporting audit processes and collaborating on risk assessments to enhance cybersecurity.
Risk Analyst supporting Keyloop’s Security Governance by managing information security risks. Identifying and monitoring risks while ensuring compliance with regulatory standards.
Cloud Security Engineer responsible for designing and implementing security controls for cloud environments at Keyloop. Ensuring secure adoption and compliance while working with platform and engineering teams.
IT Infrastructure & Security Engineer managing and developing network and server infrastructure at L - mobile. Collaborating on security measures and supporting internal audits in a hybrid role.