Senior Director Analyst – Cybersecurity GRC

About the role

This senior position leads research and advisory services on cybersecurity governance, risk and compliance (GRC) for global enterprises. You will combine deep technical knowledge with strategic insight to help senior leaders navigate complex cyber‑risk landscapes and evolving regulations.

Key responsibilities

• Develop and publish forward‑looking research, frameworks and guidance on Cybersecurity GRC.
• Advise enterprise leaders on risk identification, assessment, mitigation and governance best practices.
• Analyse market trends, emerging threats and regulatory changes to deliver actionable recommendations.
• Conduct client‑facing engagements such as virtual consultations, executive briefings, workshops and conference presentations.
• Lead discussions on compliance frameworks and standards including GDPR, ISO 27001, NIST, PCI DSS, HIPAA, SOX.
• Collaborate with cross‑functional teams to improve research quality and service excellence.
• Mentor junior analysts and foster a high‑performance knowledge‑sharing culture.
• Provide executive‑ready insights supported by quantitative and qualitative analysis.

Required profile

• 12+ years of experience in Cybersecurity GRC, Information Security or Enterprise Risk Management, including leadership roles.
• Strong expertise in cyber governance frameworks, enterprise risk assessment methodologies and regulatory compliance programs.
• Proven experience with risk analysis methodologies such as FAIR or NIST RMF.
• Deep understanding of major compliance standards and regulations.

Required skills

• FAIR risk analysis methodology
• NIST RMF
• GDPR
• CCPA
• HIPAA
• ISO 27001
• NIST standards
• PCI DSS
• SOX