ZipRecruiter

Log In

1

Director Of Security Risk Management Jobs (NOW HIRING)

Marriott

Director of Security

West Hollywood, CA · On-site

JOB SUMMARY Manages security/loss prevention operations on a daily basis. Areas of responsibilities ... Implements action plans to monitor and control risk. Maintains required reports and documentation ...

AccorHotel

Director of Security

New Orleans, LA · On-site

Reporting to the Director of Rooms, the Director of Security is responsible for developing and/or ... Excellent time management and organizational skills * Knowledge of surveillance equipment

Silverseal Inc

Security Director

New York, NY · On-site

$125K - $140K/yr

Fulfill all requirements of the new firm position of Security Director. * Responsible for the ... Oversee the daily security operations of the company to manage identified risk. * Collaborate ...

International SOS

Security Specialist

Blue Bell, PA · On-site

... and guidance of the Security Director, Assistance, and the Security Managers, Assistance, the Security Specialist, Assistance will be tasked with the delivery of high-quality security risk ...

SHEIN

GRC Risk Manager

Los Angeles, CA · On-site

A minimum of 7 years of experience in information security risk management, including business impact analysis, risk assessment and treatment, risk metrics and trend analysis. * Possess a bachelor ...

De Circle

M0 Labs - Head of Security & Risk

New York, NY · On-site +1

$117K - $153K/yr

M0 is seeking a sharp, execution-focused Head of Security & Risk to build and own the information ... Build and Own Enterprise Risk Management : Build M0's enterprise risk program from scratch. Cover ...

previous page

Showing results 41-60

All JobsFinance And Insurance JobsFinancial Services JobsRisk Manager JobsDirector Of Security Risk Management Jobs

Director Of Security Risk Management information

See salary details

$54K

$143.2K

$260K

How much do director of security risk management jobs pay per year?

As of Sep 10, 2026, the average yearly pay for director of security risk management in the United States is $143,185.00, according to ZipRecruiter salary data. Most workers in this role earn between $105,500.00 and $167,500.00 per year, depending on experience, location, and employer.

What does a director of security risk management do?

A Director of Security Risk Management is responsible for overseeing an organization's strategies and programs to identify, assess, and mitigate security risks. They develop policies and procedures to protect assets, ensure regulatory compliance, and respond to security incidents. This role involves collaborating with executives and other departments to align risk management practices with business objectives, as well as leading teams that conduct risk assessments and implement security controls.

What are the key skills and qualifications needed to thrive as a director of security risk management?

To thrive as a Director Of Security Risk Management, you need deep expertise in risk assessment, security frameworks, and regulatory compliance, often supported by a degree in cybersecurity or a related field and professional certifications like CISSP or CISM. Familiarity with risk management tools, vulnerability assessment platforms, and security information and event management (SIEM) systems is typical. Exceptional leadership, strategic thinking, and strong communication skills help drive cross-functional initiatives and foster a culture of security awareness. These competencies are crucial for proactively identifying threats, ensuring regulatory compliance, and safeguarding organizational assets.

What are the primary challenges a director of security risk management faces when aligning security initiatives with business objectives?

A Director of Security Risk Management often faces the challenge of balancing robust security measures with the organization’s operational and strategic goals. This requires effective communication with executive leadership to justify investments in security, as well as collaboration with various departments to ensure risk controls do not impede business innovation. Navigating evolving threats and regulatory requirements while maintaining business agility is a key part of the role. Success depends on fostering a culture of security awareness and building cross-functional partnerships to support both risk reduction and business growth.

What is the difference between Director Of Security Risk Management vs Security Manager?

AspectDirector Of Security Risk ManagementSecurity Manager
CertificationsCPP, PSP, CISSPCPP, PSP, CISSP (often)
Work EnvironmentStrategic planning, policy development, executive collaborationOperational security, team supervision, on-site management
Industry UsageCorporate, government, large organizationsCorporate, retail, facilities management

The Director Of Security Risk Management focuses on strategic risk assessment, policy formulation, and high-level security planning, often working with executives. In contrast, the Security Manager handles day-to-day security operations, team management, and implementing security protocols. Both roles require similar certifications but differ mainly in scope and responsibilities.

What cities are hiring for Director Of Security Risk Management jobs?

Cities with the most Director Of Security Risk Management job openings:

What states have the most Director Of Security Risk Management jobs?

States with the most job openings for Director Of Security Risk Management jobs include:

What are popular job titles related to Director Of Security Risk Management jobs?

For Director Of Security Risk Management jobs, the most frequently searched job titles are:

Infographic showing various Director Of Security Risk Management job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 83% Full Time, 13% Part Time, and 3% Contract. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution, with an average salary of $143,185 per year, or $68.8 per hour.

Assoc Dir, Information Security Governance Risk & Compliance

Boston, MA • On-site

Servier
See more jobs at Servierexternal

Full-time

Medical, Dental, Vision, Life, Retirement

Re-posted 11 days ago

Job description

About Servier
Servier in the U.S. is a Boston-based, commercial-stage biopharmaceutical company launched by Servier Group in 2018. As a privately held organization, Servier is uniquely positioned to advance cutting-edge science, tackle underserved therapeutic areas and make patients the focus of every strategic decision.
Role Summary
The Associate Director, Information Security Governance Risk and Compliance serves as the functional leader for Governance, Risk and Compliance across the US affiliate, reporting to the Associate Director, Cybersecurity. This role establishes and leads the GRC operating model, governance framework, risk methodology, strategic priorities, and maturity roadmap. The role provides oversight of information security risk management, policy governance, compliance, third-party risk management, control assurance, audit readiness, and risk reporting while directing operational execution through subordinate managers, analysts, contractors, and service providers. This position partners closely with Global Information Security, IT, Legal, Privacy, Procurement, Quality, Internal Audit, and business stakeholders to ensure risks are identified, assessed, communicated, and managed in alignment with enterprise requirements. The role serves as the primary GRC advisor and enables risk-informed decision making by translating information security risk into business, operational, regulatory, and financial impact. This is a high visibility leadership role with the opportunity to build and scale a modern GRC capability aligned to Servier's global cybersecurity strategy, enterprise risk expectations, regulatory obligations, and business growth.
Primary Responsibilities
Cyber Risk Management and Governance
  • Establish and lead the US information security risk management framework across the affiliate
  • Define risk assessment methodologies, risk taxonomy, scoring models, reporting standards, and escalation criteria
  • Provide oversight and challenge of risk assessments performed by the GRC team
  • Ensure information security risks are clearly defined, consistently assessed, and aligned to Group methodology and enterprise risk expectations
  • Review material risks, treatment recommendations, mitigation strategies, and risk acceptance proposals before escalation
  • Drive risk-based prioritization of remediation activities, investment recommendations, and control improvement initiatives

Local Risk Coordinator and GRC Program Leadership
  • Serve as the senior US GRC leader responsible for coordinating information security risk governance across the affiliate
  • Act as the primary US liaison to Global Information Security for GRC-related risk, compliance, policy, and assurance activities
  • Establish governance routines, program cadences, reporting expectations, and execution standards for the US GRC function
  • Ensure alignment between US affiliate execution and Global risk management methodology, policy baselines, and governance expectations
  • Escalate material risks, systemic issues, overdue remediation, and governance concerns through US and Global governance channels

Governance, Policy and Control Assurance
  • Establish governance expectations for information security policies, standards, procedures, control requirements, and exception management
  • Sponsor the local information security policy lifecycle, ensuring alignment with Global baselines, US business requirements, and regulatory obligations
  • Define the control assurance approach used to evaluate control design, implementation, effectiveness, and maturity
  • Oversee control monitoring, compliance validation, gap analysis, and continuous improvement activities
  • Define and monitor KPIs and KRIs measuring policy adoption, control maturity, security posture, remediation progress, and governance effectiveness

Third-Party Risk and Enterprise Risk Integration
  • Establish the strategic direction for third-party information security risk management across the US vendor ecosystem
  • Define governance requirements, risk acceptance criteria, assessment standards, and escalation paths for third-party engagements
  • Partner with Procurement, Legal, Privacy, IT, and business stakeholders to ensure vendor security risks are appropriately assessed and managed
  • Oversee integration of third-party security risk into enterprise risk management, procurement processes, contractual reviews, and business decision making
  • Drive cross-domain alignment across Information Security, IT, Legal, Privacy, Procurement, Quality, and business functions

Audit, Compliance and Assurance Oversight
  • Oversee information security audit readiness across internal audits, external audits, regulatory engagements, and assurance activities
  • Establish governance over evidence collection, control validation, audit response, remediation tracking, and management reporting
  • Ensure audit findings, compliance gaps, and control deficiencies are translated into clear risk treatment plans with defined owners, timelines, and measurable outcomes
  • Partner with Internal Audit, Quality, Legal, Privacy, and Global Information Security to support assurance activities and regulatory expectations

Executive Engagement and Cross-Functional Influence
  • Act as a trusted advisor on information security governance, risk, compliance, and assurance matters
  • Translate complex information security risks into business, operational, regulatory, financial, and reputational impact
  • Deliver executive-level reporting on information security risk posture, governance maturity, compliance status, control effectiveness, and remediation progress
  • Support governance committees, leadership forums, business reviews, and strategic planning discussions with clear risk-based recommendations
  • Represent US GRC priorities in Global information security and enterprise risk forums, influencing alignment where appropriate

Organizational Leadership and Capability Building
  • Lead and develop the US Information Security Governance Risk and Compliance function
  • Manage GRC managers, analysts, contractors, consultants, managed service providers, and supporting resources
  • Define the GRC organizational structure, operating procedures, quality standards, workforce strategy, and capability development roadmap
  • Build scalable and repeatable GRC processes aligned to information security maturity objectives and organizational growth
  • Identify opportunities to improve efficiency through automation, process standardization, documentation quality, tooling, and operating model maturity

Education and Required Skills
  • Minimum of 8+ years of experience in information security GRC, IT risk management, cybersecurity, compliance, audit, security operations, or related disciplines
  • Minimum of 3+ years in a leadership role with responsibility for program ownership, people leadership, functional leadership, or management of managers
  • Bachelor's degree preferred in Cybersecurity, Information Technology, Information Systems, Business, Risk Management, or a related field
  • Deep expertise in information security risk frameworks and governance models, including NIST CSF 2.0, ISO 27001, PCI, SOX, FAIR, or similar methodologies
  • Experience leading policy governance, third-party risk management, compliance oversight, audit readiness, control assurance, and remediation governance programs
  • Strong executive communication skills with the ability to influence senior stakeholders in a global, matrixed organization
  • Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, FAIR, or equivalent preferred

Travel and Location
  • Onsite in Boston preferred 1-2 days hybrid; Remote considered with occasional travel to Boston
  • Estimated travel required: 5-10%

Servier's Commitment
Servier is committed to modeling diversity, equity, and inclusion within the industry. We are dedicated to fostering an environment that maintains equitable treatment for all and we welcome applicants who are passionate, committed, and innovative individuals. We encourage candidates to apply to our open roles as we are always willing to consider experiences and skills beyond what is listed in the job description.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Salary Range
The salary range for this role is $179,000-$212,000. An employee's pay position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs. We may ultimately pay more or less than the posted range, and the range may be modified in the future. Employees in this position are also eligible for Short-Term and Long-Term incentive programs. Servier also offers a competitive and comprehensive benefits package that includes benefits such as medical, dental, vision, flexible time off (Servier provides unlimited sick time and flex time, and does not accrue time off), 401(k), life and disability insurance, recognition programs among other great benefits (all benefits are subject to eligibility requirements). For more information on our benefits, please visit this link.

Apply