Director, Information Security Governance Risk Compliance
Viatris
August 25, 2026
Remote friendly (United States)
United States
IT
Director, Governance, Risk & Compliance (GRC)
Responsibilities:
- Develop and maintain enterprise cybersecurity governance, risk, and compliance strategies.
- Direct enterprise risk assessments, compliance reviews, and control maturity evaluations.
- Lead development and implementation of cybersecurity policies, standards, procedures, and governance frameworks.
- Oversee audit readiness for internal audits, regulatory inspections, and third-party assessments.
- Review and communicate enterprise cyber risk posture, key risk indicators, and remediation priorities to executive leadership and governance committees.
- Oversee third-party cybersecurity risk management (supplier risk evaluations and contractual security requirements).
- Coordinate remediation strategies for vulnerabilities, audit findings, and risk treatment plans.
- Guide cybersecurity governance and compliance strategic planning and budgeting.
- Collaborate with legal, privacy, quality, manufacturing, and IT to align governance with enterprise risk management.
- Support business continuity and operational resilience for critical processes.
- Partner with architecture/engineering to integrate security controls and compliance into solutions.
- Promote cybersecurity awareness and risk-informed decision-making.
- Evaluate cybersecurity/compliance risks for mergers, acquisitions, and digital transformation.
Qualifications:
- Bachelor’s degree (MIS, IT, or Engineering) required; Master’s preferred.
- 8+ years of IT or Cybersecurity experience.
- Knowledge of cybersecurity/privacy principles, frameworks, and global pharmaceutical regulatory requirements (GxP, HIPAA, SOX, GDPR, FDA).
- Enterprise risk management, governance, and compliance assessment knowledge.
- Audit practices and internal controls; SOX/HIPAA/GDPR/GxP compliance.
- Third-party risk management and vendor governance.
- Incident management, vulnerability management, and security operations governance.
- Security architecture, cloud technologies, and data protection methodologies.
Compensation:
Salary range: $112,000.00 - $236,000.00 USD.
Responsibilities:
- Develop and maintain enterprise cybersecurity governance, risk, and compliance strategies.
- Direct enterprise risk assessments, compliance reviews, and control maturity evaluations.
- Lead development and implementation of cybersecurity policies, standards, procedures, and governance frameworks.
- Oversee audit readiness for internal audits, regulatory inspections, and third-party assessments.
- Review and communicate enterprise cyber risk posture, key risk indicators, and remediation priorities to executive leadership and governance committees.
- Oversee third-party cybersecurity risk management (supplier risk evaluations and contractual security requirements).
- Coordinate remediation strategies for vulnerabilities, audit findings, and risk treatment plans.
- Guide cybersecurity governance and compliance strategic planning and budgeting.
- Collaborate with legal, privacy, quality, manufacturing, and IT to align governance with enterprise risk management.
- Support business continuity and operational resilience for critical processes.
- Partner with architecture/engineering to integrate security controls and compliance into solutions.
- Promote cybersecurity awareness and risk-informed decision-making.
- Evaluate cybersecurity/compliance risks for mergers, acquisitions, and digital transformation.
Qualifications:
- Bachelor’s degree (MIS, IT, or Engineering) required; Master’s preferred.
- 8+ years of IT or Cybersecurity experience.
- Knowledge of cybersecurity/privacy principles, frameworks, and global pharmaceutical regulatory requirements (GxP, HIPAA, SOX, GDPR, FDA).
- Enterprise risk management, governance, and compliance assessment knowledge.
- Audit practices and internal controls; SOX/HIPAA/GDPR/GxP compliance.
- Third-party risk management and vendor governance.
- Incident management, vulnerability management, and security operations governance.
- Security architecture, cloud technologies, and data protection methodologies.
Compensation:
Salary range: $112,000.00 - $236,000.00 USD.