ZipRecruiter

Log In

1

Director Cybersecurity Governance Jobs (NOW HIRING)

Arctiq

Director, Cybersecurity & Compliance

Brentwood, TN · On-site

$105K - $141K/yr

Our client is seeking a strategic and hands-on Director of Cybersecurity & Compliance to lead ... Governance, Risk & Compliance * Maintain security policies, standards, risk registers, and ...

Celanese

Director, Cybersecurity Operations

Irving, TX · On-site

$180 - $240/hr

The Director, Cybersecurity Operations is responsible for leading and evolving the company ... Operational Governance & Managed Services Oversight * Govern the performance, delivery, and ...

Genting New York LLC

Director Cybersecurity

Manhattan, NY · On-site

$170 - $250/hr

The Director partners closely with executive leadership, IT infrastructure, application teams ... Establish and maintain cybersecurity governance, policies, standards, and procedures across all ...

GM Financial

Cybersecurity Team Lead

Irving, TX · On-site

$103K - $139K/yr

  • Retirement

... with direct reporting lines to the CEO. This structure ensures your work is recognized and ... The Cybersecurity organization is hiring two Team Leads to support critical governance functions.

VHC Health

Director, Cybersecurity Compliance

Arlington, VA · On-site

$151K - $288K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

The Director of Cybersecurity Compliance leads the healthcare organization's information security governance, risk, and compliance (GRC) program. This role is accountable for defining regulatory ...

SM Energy

Cybersecurity Supervisor/Manager

Denver, CO · On-site

$114K - $154K/yr

  • Medical

  • Retirement

Governance, Risk & Compliance * Maintain and enhance cybersecurity policies, standards, procedures, and governance processes. * Partner with the Director - Cybersecurity & Business Continuity to ...

New

VHC Health

Director, Cybersecurity Compliance

Arlington, VA

$151K - $288K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

The Director of Cybersecurity Compliance leads the healthcare organizations information security governance, risk, and compliance (GRC) program. This role is accountable for defining regulatory ...

previous pagenext page

Showing results 21-40

All JobsCybersecurity Governance JobsDirector Cybersecurity Governance Jobs

Director Cybersecurity Governance information

See salary details

$62.5K

$133.7K

$195K

How much do director cybersecurity governance jobs pay per year?

As of Aug 15, 2026, the average yearly pay for director cybersecurity governance in the United States is $133,749.00, according to ZipRecruiter salary data. Most workers in this role earn between $107,000.00 and $157,000.00 per year, depending on experience, location, and employer.

How does a director of cybersecurity governance typically collaborate with other departments within an organization?

A Director of Cybersecurity Governance works closely with various departments such as IT, legal, compliance, risk management, and executive leadership to ensure that cybersecurity policies and frameworks align with business objectives. This role often leads cross-functional initiatives, facilitates security awareness training, and ensures regulatory requirements are met through regular communication and coordination. Effective collaboration is essential for identifying potential risks, implementing consistent controls, and responding to security incidents across the organization. Building strong partnerships with department heads also helps integrate cybersecurity best practices into daily operations and strategic planning.

What are the key skills and qualifications needed to thrive as a director of cybersecurity governance, and why are they important?

To thrive as a Director of Cybersecurity Governance, you need deep expertise in information security frameworks, risk management, compliance, and typically a bachelor’s or master’s degree in cybersecurity or a related field. Familiarity with tools like GRC (Governance, Risk, and Compliance) platforms, as well as certifications such as CISSP, CISM, or CRISC, is highly valued. Exceptional leadership, strategic thinking, and communication skills are essential for guiding teams and influencing executive decision-making. These skills ensure the organization can effectively identify, mitigate, and manage cybersecurity risks while maintaining regulatory compliance and stakeholder trust.

What does a director of cybersecurity governance do?

A Director of Cybersecurity Governance oversees the development, implementation, and management of an organization's cybersecurity policies, standards, and frameworks. They ensure the company's information security practices align with legal, regulatory, and industry requirements. This role involves leading risk assessments, managing compliance audits, and collaborating with other departments to enforce security controls. Ultimately, the Director helps protect the organization's digital assets and ensures a strong cybersecurity posture.

What is the difference between Director Cybersecurity Governance vs Cybersecurity Manager?

AspectDirector Cybersecurity GovernanceCybersecurity Manager
CertificationsCISSP, CISM, CISACISSP, Security+
Work EnvironmentStrategic, executive-level, policy developmentOperational, team management, implementation
Employer & Industry UsageLarge organizations, corporate security departmentsMid-sized to large organizations, security teams
Search & Comparison IntentUnderstanding strategic governance rolesOperational security management

The main difference is that the Director Cybersecurity Governance focuses on strategic oversight, policy development, and aligning security with business goals, while the Cybersecurity Manager handles day-to-day security operations, team management, and implementation of security measures. Both roles require relevant certifications and are vital in organizational security, but they differ in scope and responsibilities.

More about Director Cybersecurity Governance jobs

What cities are hiring for Director Cybersecurity Governance jobs?

Cities with the most Director Cybersecurity Governance job openings:

What are the most commonly searched types of Cybersecurity Governance jobs?

The most popular types of Cybersecurity Governance jobs are:

What states have the most Director Cybersecurity Governance jobs?

States with the most job openings for Director Cybersecurity Governance jobs include:

What job categories do people searching Director Cybersecurity Governance jobs look for?

The top searched job categories for Director Cybersecurity Governance jobs are:

Director Cybersecurity Governance jobs near you
Infographic showing various Director Cybersecurity Governance job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 85% Full Time, 12% Part Time, 1% Temporary, and 1% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $133,749 per year, or $64.3 per hour.

Senior Director, Cybersecurity- Architecture

AstraZeneca

Gaithersburg, MD • On-site

Full-time

This job post has expired today. Applications are no longer accepted.

AstraZeneca rating

8.4

Company rating: 8.4 out of 10

Based on 45 frontline employees who took The Breakroom Quiz

22nd of 86 rated pharmaceutical

Job description

Job Description Summary:
The Senior Director, Cybersecurity Architecture serves as the senior-most cybersecurity architect in the enterprise, responsible for defining and driving the cybersecurity architecture vision, standards, and patterns that enable secure adoption of artificial intelligence, advanced analytics, cloud platforms, data-driven innovation, and modernized operational technology across a global, regulated business.
This strategic technical leadership role bridges business strategy with technical execution, ensuring that security is embedded by design into the company's most critical transformations - including generative AI platforms, enterprise data ecosystems, multi-cloud migrations, Zero Trust initiatives, and digital and connected-health solutions. The role leads a team of specialized security architects, partners with Enterprise Architecture and business technology leaders, and serves as the authoritative voice on security architecture across the organization.
The role demands deep technical expertise in modern cloud-native architectures, AI/ML security, data protection, identity, and Zero Trust principles, combined with the business acumen to translate complex security concepts into enabling strategies that accelerate innovation while managing risk in a highly regulated industry.
Cybersecurity Domain Scope:
The Senior Director, Cybersecurity Architecture owns the security architecture across the following domains, setting direction for the architects and engineers who deliver in each area:
  • Enterprise AI & Data Security - generative AI, machine learning platforms, LLMOps/MLOps, model governance, training-data protection, prompt injection prevention, AI agent security, enterprise data lakes, data mesh, and analytics platforms.

  • Cloud Security - multi-cloud (AWS, Azure, GCP) and hybrid patterns, secure landing zones, Infrastructure-as-Code, DevSecOps pipelines, container and serverless workloads, SaaS, and API security.

  • Zero Trust & Identity - Zero Trust Architecture aligned to NIST SP 800-207, enterprise identity fabric, privileged and non-human identity governance, passwordless and phishing-resistant MFA, ZTNA, and SASE.

  • OT & Manufacturing Security - architectures aligned to the Purdue Model (ISA-95) and IEC 62443, industrial DMZ, OT/IT convergence, MES, SCADA, historians, PLCs/HMIs, and secure remote vendor access.

  • Architecture Governance - Security Architecture Review Board (SARB), reference architectures, design patterns, threat modeling, and exception management aligned to NIST CSF, ISO 27001, and CIS.

  • Regulatory Context - GxP, 21 CFR Part 11, EU Annex 11, ALCOA+, GDPR, HIPAA, and FDA cybersecurity guidance integrated into all architecture decisions.

Typical Accountabilities:
Architecture Strategy, Direction & Standards
  • Define the architecture strategy, direction, and standards pertinent for the cybersecurity architecture segment.

  • Analyze and translate business priorities and strategies into architecture requirements for the enterprise.

  • Act as an authority to the architecture community and the business regarding strategic architecture decisions for the cybersecurity segment.

  • Drive, review, approve, and oversee development and deployment of cybersecurity architecture roadmaps and blueprints (1-5 year horizon) as well as solution and segment architectures in alignment with global strategies and solutions.

  • Ensure continuous alignment of capabilities with current business priorities and objectives.

  • Contribute to strategic technology and architecture decisions as part of cross-functional decision-making bodies (e.g., SARB, Enterprise Architecture Review Board, IT Leadership Team).

  • Lead the development and implementation of Enterprise Architecture (EA) standards, processes, and tools as they apply to cybersecurity.

  • Engage with project and service teams in the development, implementation, and maintenance of standard architectural components.

  • Drive creation of functional design documents - including the risk and change management portions of the architectural lifecycle - across portfolios.

Cross-Domain Resolution & Technical Counsel:
  • Lead resolution of complex cross-domain and technical concerns, needs, and suggestions from business teams across portfolios to improve architecture design and mitigate risk.

  • Act as strategic architectural advisor and provide technical counsel to global leadership teams - both business and IT - on potential business-critical enterprise needs and risks.

  • Present strategic recommendations for systemic, structural, and technology solutions to executive leadership, including the CISO, CIO, and Audit Committee where appropriate.

  • Lead Security Architecture Review Board (SARB) activity for major initiatives and technology investments, ensuring consistent, risk-based architecture decisions.

  • Conduct architecture risk assessments and threat modeling for critical systems and initiatives; manage architecture exceptions and waivers with documented risk acceptance.

Third-Party & Supplier Direction:
  • Provide direction to third-party suppliers to ensure adherence to technical development and delivery aligned with the architecture roadmap, blueprint, and information systems strategy.

  • Evaluate vendor security architectures for major technology procurements; influence vendor roadmaps to address industry and regulatory security requirements.

  • Establish secure integration patterns with strategic partners, contract research and manufacturing organizations, and external collaborators.

Performance, Measurement & Reporting:
  • Direct and drive monitoring, measurement, and reporting around the performance of current and upgraded architecture, systems, solutions, and frameworks across portfolios.

  • Maintain an architecture repository with patterns, standards, approved designs, and security control mappings to compliance frameworks and audit requirements.

  • Track adoption of published security architecture standards and reference architectures; report on maturity, exception volume, and risk posture to leadership.

Innovation, Best Practices & Thought Leadership:
  • Monitor and identify IT architecture best practices and emerging technologies regionally and globally to facilitate enterprise technology decisions.

  • Evaluate security implications of emerging technologies - quantum computing, post-quantum cryptography, edge AI, blockchain, and conduct proof-of-concept architectures.

  • Serve as a recognized thought leader within and beyond the organization, typically with leadership roles in multi-institution collaborations.

  • Represent the company at industry forums, standards bodies, and peer working groups (e.g., Pharma ISAC, IEC 62443 working groups).

Talent Pipeline & Architecture Capability:
  • Actively monitor the strength of the IT architecture talent pipeline.

  • Propose and implement strategic future-focused skill-development interventions across areas through cross-functional, regional, and external partnerships to equip and adapt the IT architecture workforce to evolving technologies.

  • Define security-architect competency models and career progression pathways; facilitate an architecture community of practice for knowledge sharing across the organization.

As a People Manager:
  • Develop, deliver, and monitor budgets - including capital - for the cybersecurity architecture segment.

  • Collaborate with business and regional leaders for prioritization and alignment of segment IT architecture strategy, goals, and projects.

  • Build, lead, and motivate IT architecture teams to achieve stretch goals.

  • Develop the professional and leadership capabilities of IT architecture professionals and managers through coaching, delegation, development plans, stretch assignments, and rotations.

  • Lead and mentor a team of specialized security architects (Cloud Security, AI/Data Security, OT/ICS Security, Application Security, Infrastructure Security).

Qualifications:
Education & Experience
  • Bachelor's degree in relevant technical field of study; Master's preferred.
  • Minimum 10+ years of experience

  • Preferred certifications: CISSP, CCSP, SABSA; cloud-platform security specialty certifications (AWS, Azure, GCP); GIAC Security Architecture or Cloud Security; CISM.

Architecture & Technical Experience
  • Proven experience in architecture method execution.

  • Significant experience in development and design across technical domains.

  • Extensive experience defining and aligning architectural roadmaps and strategies to business strategy.

  • Experience with rationalization, consolidation, and integration across business domains using a formal framework.

  • Experience with large justification-phase work - product evaluation and business case formulation.

  • Experience defining and developing components of an enterprise architecture practice.

  • Experience engaging and negotiating with third-party suppliers.

Leadership & Stakeholder Experience
  • Experience influencing cross-functional global leadership and other senior stakeholders to adopt change or innovative IT solutions.

  • Extensive experience managing geographically dispersed teams in a global matrix organization with direct and indirect reports - providing oversight, guidance, and mentoring.

  • Extensive experience working across boundaries - internally, cross-functionally, externally, internationally, and cross-culturally.

  • Experience planning and managing budgets and resources for a large IT infrastructure function.

  • Experience co-working with cross-functional global leadership and other senior stakeholders preferred.

  • Substantial experience communicating with and influencing diverse internal and external stakeholders, including supplier and vendor networks, across areas and geographies, to drive infrastructure strategy and outcomes.

  • Substantial experience anticipating, assessing, and managing project risks.

Domain Expertise (Preferred)
  • 15+ years in information security with 10+ years focused on security architecture and engineering; 5+ years in leadership roles.

  • Deep expertise in cloud security architecture (AWS, Azure, GCP) including multi-cloud and hybrid cloud patterns, IaC and DevSecOps, container and serverless security.

  • Proven experience with AI/ML and generative-AI security - model security, adversarial ML, data protection, AI governance, prompt-injection defense, AI-agent security.

  • Strong background in data security architecture for enterprise data platforms, analytics, and data governance (classification, encryption, tokenization, DLP, privacy-enhancing technologies).

  • Experience with Zero Trust Architecture design and implementation; identity fabric, PAM, NHI governance, passwordless authentication, ZTNA/SASE.

  • Knowledge of OT/ICS security architecture for manufacturing or critical-infrastructure environments (Purdue Model, IEC 62443) - pharmaceutical experience highly desirable.

  • Familiarity with regulated-industry requirements (GxP, 21 CFR Part 11, EU Annex 11, ALCOA+, CSV/CSA, GDPR, HIPAA) and ability to design controls that satisfy them without impeding innovation.

Key Relationships:
Direct Reports
  • Cloud Security Architect(s)

  • AI / Data Security Architect(s)

  • OT / ICS Security Architect(s)

Internal Stakeholders
  • Executive Director, Cybersecurity Engineering, Architecture & Transformation (manager)

  • CISO and CISO Leadership Team

  • Business Information Security Officer (BISO) leads

  • Security Operations Center leadership; GRC; Cybersecurity Engineering teams

  • Enterprise Architecture; Cloud, Data, and AI/ML platform teams

  • Business Technology Groups (R&D, Manufacturing, Commercial, Enabling Units) and Centers of Excellence

External Stakeholders
  • Cloud service providers (AWS, Azure, GCP) and strategic technology vendors

  • Industry peers in pharmaceutical CISO and architecture communities

  • Standards bodies and industry forums (e.g., Pharma ISAC, IEC 62443 working groups)

Working Conditions & Travel:
  • Hybrid work model with flexibility for remote work; office presence as needed for collaboration.

  • Occasional work outside standard business hours for global collaboration and incident response.

  • 15-25% domestic and international travel - site visits to manufacturing facilities, data centers, regional offices, industry conferences, and architecture workshops.

Why T

What AstraZeneca employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply