ZipRecruiter

Log In

1

Director Risk Compliance Jobs (NOW HIRING)

LC Industries

Director, Risk Management

Durham, NC · On-site

ABOUT THIS ROLE The Director of Risk Management is responsible for transforming and leading the ... Ensure compliance with environmental regulations and oversee environmental reporting and ...

MasterCard

Director, Risk Management

Purchase, NY · On-site

Title and Summary Director, Risk Management Overview: The Core Payments Strategy & Execution team ... Audit & Compliance Oversight: -Act as a trusted key liaison for internal audits and regulatory ...

SCHEELS

Risk & Compliance Leader

Fargo, ND

The Governance and Compliance Leader is responsible for building, implementing, and owning an enterprise risk management (ERM) framework that is designed for Scheels' business and culture. Reporting ...

Scheels

Risk & Compliance Leader

Fargo, ND · On-site

The Governance and Compliance Leader is responsible for building, implementing, and owning an enterprise risk management (ERM) framework that is designed for Scheels' business and culture. Reporting ...

L C Industries

Director, Risk Management

Durham, NC · On-site

ABOUT THIS ROLE The Director of Risk Management is responsible for transforming and leading the ... Ensure compliance with environmental regulations and oversee environmental reporting and ...

Crow Holdings

Director, Risk Management

Dallas, TX · On-site

Position Summary The Director of Risk Management supports the execution of TCR's risk management ... Manage insurance compliance processes, including contract review and ensuring third-party adherence ...

ViziRecruiter,LLC.

NY · On-site

Overview Responsible for providing paralegal and administrative support to the Chief Compliance Officer and Director of Risk & Compliance performing a variety of paralegal, secretarial, technical and ...

Tacony Corporation

The Director, Governance, Risk & Compliance (GRC) serves as the enterprise's senior leader responsible for governing the compliance dimensions of modern technology and AI. This role is a second line ...

Newegg

Director, Risk Management

Diamond Bar, CA · On-site

Risk Operations, Controls & Compliance * Ensure internal controls are operating effectively and ... Direct the creation and maintenance of Business Continuity Plans (BCP) and Emergency Response Plans.

Crow Holdings

Director, Risk Management

Dallas, TX · On-site

Position Summary The Director of Risk Management supports the execution of TCR's risk management ... Manage insurance compliance processes, including contract review and ensuring third-party adherence ...

UpLevel Sourcing

Director Risk Management

Las Cruces, NM · On-site

$120K - $150K/yr

Director of Risk Management Position Type: Full-time / Onsite Location: Scenic Regional Area, New ... Additionally, this role serves a dual function as the facility's Compliance and Ethics Officer

previous page

Showing results 41-60

All JobsBusiness JobsOperations JobsDirector Of Compliance JobsDirector Risk Compliance Jobs

Director Risk Compliance information

See salary details

$67.5K

$139.1K

$207.5K

How much do director risk compliance jobs pay per year?

As of Sep 11, 2026, the average yearly pay for director risk compliance in the United States is $139,148.00, according to ZipRecruiter salary data. Most workers in this role earn between $102,500.00 and $174,500.00 per year, depending on experience, location, and employer.

What is the difference between Director Risk Compliance vs Risk Analyst?

AspectDirector Risk ComplianceRisk Analyst
Required CredentialsBachelor's degree, often advanced certifications like CRCM or CRMBachelor's degree, certifications like FRM or CRM beneficial
Work EnvironmentLeadership role overseeing compliance programs, strategic planningAnalyzing data, assessing risks, supporting compliance efforts
Employer & Industry UsageFinancial institutions, corporations, regulated industriesFinancial services, insurance, consulting firms

The main difference is that the Director Risk Compliance leads and manages compliance strategies, while the Risk Analyst supports risk assessments through data analysis. The director holds a higher leadership role with broader responsibilities, whereas the analyst focuses on detailed risk evaluation tasks.

What cities are hiring for Director Risk Compliance jobs?

Cities with the most Director Risk Compliance job openings:

What are the most commonly searched types of Risk Compliance jobs?

The most popular types of Risk Compliance jobs are:

What states have the most Director Risk Compliance jobs?

States with the most job openings for Director Risk Compliance jobs include:

What are popular job titles related to Director Risk Compliance jobs?

For Director Risk Compliance jobs, the most frequently searched job titles are:

Director Risk Compliance jobs near you

Director, Governance, Risk & Compliance

Redwood City, CA • On-site

Anomali
Network Security • 51 - 200 employees
Learn more about Anomaliexternal

Full-time

Re-posted 20 days ago

Job description

Company Description:
Anomali, headquartered in Silicon Valley, delivers the first Intelligence-Native Agentic SOC Platform - unifying a security data lake, the world's largest IOC repository, threat intelligence, and agentic AI into a single modern experience. The platform accelerates detection, investigation, and response, delivering earlier insights, faster action, and scalable modernization across any environment.
Whether augmenting existing tools or delivering complete SOC capabilities end-to-end, Anomali empowers security teams to operate faster, smarter, and with confidence.
Beyond Detecting. Start Deciding. Start Acting.
Learn more at www.anomali.com
Position Overview:
Anomali is scaling its compliance program to support an AI-native cybersecurity platform used by governments and enterprises worldwide. We're looking for a hands-on GRC leader who can own and drive our multi-jurisdiction certification portfolio - spanning U.S. federal (FedRAMP), global (ISO 27001, SOC 2), and regional cloud security frameworks (UAE DESC, Saudi Arabia NCA/CCC, Australia IRAP) - while building the scalable compliance infrastructure to support continued international expansion.
This is a builder role, not a maintainer role. You'll be the single point of accountability for keeping our certifications current, audit-ready, and strategically sequenced to unlock new markets and revenue.
Key Responsibilities:
Program Ownership & Strategy
  • Own the end-to-end GRC roadmap across FedRAMP, ISO 27001, SOC 2, DESC (Dubai Electronic Security Center), Saudi NCA Cloud Cybersecurity Controls (CCC), Australia IRAP, and other regional cloud security/data residency frameworks as they arise
  • Prioritize and sequence certification efforts against GTM and revenue targets, in partnership with sales, product, and executive leadership
  • Serve as the primary liaison with assessors, auditors, and regulatory bodies (3PAOs, sponsoring agencies, in-country assessors)

FedRAMP
  • Manage ongoing FedRAMP authorization activities (ATO maintenance, continuous monitoring, SAR/POA&M remediation) in partnership with the 3PAO and sponsoring agency
  • Own documentation quality (SSP, SAR, POA&M) and escalation management when assessor deliverables fall short

ISO 27001
  • Maintain and evolve the ISMS, manage internal/external audit cycles, and drive continuous improvement of controls, risk assessments, and policy frameworks

SOC 2
  • Own SOC 2 Type II audit readiness and execution (Security, Availability, and Confidentiality trust services criteria) in partnership with the external audit firm
  • Manage evidence collection, control testing, and remediation of exceptions across annual audit cycles
  • Ensure alignment between SOC 2 controls and overlapping ISO 27001/FedRAMP requirements to avoid duplicated audit effort

Regional Cloud/Government Certifications
  • Drive DESC CSP certification for UAE market access. The CSP Security Standard is based on the following international standards, which the candidate should be conversant in:
    • ISO/IEC 27001:2013
    • ISO/IEC 27002:2013
    • ISO/IEC 27017:2015
    • ISR:2017 v.02
    • CSA Cloud Controls Matrix 3.0.1
  • Manage Saudi NCA compliance (ECC/CCC) in coordination with local partners
  • Own Australia IRAP assessment process and coordination with registered assessors
  • Monitor emerging regional requirements (e.g., additional Gulf, APAC, or EU frameworks) and advise on prioritization

Risk & Controls
  • Build and maintain a unified controls framework that maps overlapping requirements across all frameworks to avoid duplicated effort
  • Own enterprise risk register, vendor/third-party risk management, and remediation tracking
  • Partner with engineering and product teams to ensure security controls are designed in, not bolted on

Cross-Functional Leadership
  • Partner with internal cross-functional teams - IT, Security, Cloud Infrastructure, Engineering, and Product - to own and drive compliance outcomes end-to-end
  • Support customer/prospect due diligence (security questionnaires, audit requests, trust portal)
  • Partner with legal on regulatory obligations, data residency, and contractual compliance commitments
  • Report compliance posture and risk to executive leadership and board as needed

Qualifications
Required Skills/Experience:
  • 8+ years in GRC, information security compliance, or related audit/assurance roles, with 3+ years in a leadership capacity
  • Direct, hands-on experience with FedRAMP (Moderate or High) as a CSP-side practitioner - not just advisory
  • Demonstrated ownership of ISO 27001 certification and ongoing ISMS management
  • Demonstrated ownership of SOC 2 Type II audits, from readiness through report delivery
  • Experience with at least one Middle East cloud security framework (DESC, Saudi NCA/CCC, or equivalent)
  • Familiarity with Australia IRAP assessment process
  • Strong working knowledge of cloud security architecture (AWS/Azure/GCP) and how controls map to technical implementation
  • Excellent stakeholder management - comfortable working directly with C-suite, auditors, and government sponsors
  • Exceptional written communication skills (SSPs, policies, board-level reporting)
  • For candidates residing within commutable distance of Redwood City, CA, this position will be hybrid. Remote candidates based in the US, will also be considered.
  • This position is not eligible for employment visa sponsorship. The successful candidate must not now, or in the future, require visa sponsorship to work in the US.

Preferred Qualifications
  • Certifications: CISSP, CISA, CISM, or ISO 27001 Lead Auditor/Implementer
  • Experience in a high-growth, venture-backed SaaS or cybersecurity company
  • Prior experience managing multiple concurrent certifications across regions
  • Experience with GRC tooling (Vanta, Drata, ServiceNow GRC, or similar)

What Success Looks Like
  • FedRAMP ATO maintained with zero material findings; audit cycles run predictably
  • ISO 27001 recertification and surveillance audits pass without major nonconformities
  • SOC 2 Type II report delivered annually with no material exceptions
  • DESC, Saudi CCC, and IRAP certifications achieved on committed timelines, unlocking regional deals
  • A documented, reusable controls framework that reduces redundant audit effort across all certifications
  • Compliance treated as a competitive differentiator in sales cycles, not a bottleneck

Equal Opportunities Monitoring
It is our policy to ensure that all eligible persons have equal opportunity for employment and advancement on the basis of their ability, qualifications and aptitude. We select those suitable for appointment solely on the basis of merit without regard to an individual's disability, race, color, religion, sex, sexual orientation, gender identity, national origin, age, or status as a protected veteran. Monitoring is carried out to ensure that our equal opportunity policy is effectively implemented.
If you are interested in applying for employment with Anomali and need special assistance or accommodation to apply for a posted position, contact our Recruiting team at [email protected].
Compensation Transparency
$180,000 - $230,000 USD
Please note that the annual base salary range is a guideline and, for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as, knowledge, skills and experience of the candidate. In addition to base pay, this position is eligible for benefits, and may be eligible for a bonus and/or equity.

Apply