Description
Grant Thornton is looking for a Global Director of Information Security Audit & Compliance to lead and enhance our audit and compliance team. This role will focus on establishing global delivery centers, overseeing internal and external audits, and ensuring our information security program adheres to a consistent and robust framework aligned with NIST CSF and NIST 800-53.
The ideal candidate will possess extensive audit and regulatory expertise, coupled with exceptional operational leadership skills, enabling our organization to fulfill regulatory, client, and certification obligations while fostering business growth and innovation.
Key Responsibilities
Audit & Compliance StrategyDevelop and direct the global information security audit and compliance strategy throughout the organization.Establish and expand global delivery centers to bolster audits, evidence management, and ongoing compliance operations.Manage the audit calendar and roadmap for ISO, NIST-based, HIPAA, and client-driven audits.Audit Management & ExecutionLead enterprise-wide audits and assessments, including ISO 27001, NIST, HIPAA, and client-specific security audits.Serve as the primary liaison for external auditors, regulators, and client assessors.Ensure high-quality audit deliverables, responses, and remediation plans are completed in a timely manner.Governance, Risk & Control FrameworkAlign the information security governance program with the NIST Cybersecurity Framework (CSF) and NIST 800-53.Develop, maintain, and advance security policies, standards, and control frameworks.Ensure consistent implementation, testing, and documentation of controls across global teams.Continuous Compliance & Control AssuranceCreate processes for continuous control monitoring, internal testing, and readiness assessments.Track audit findings, remediation efforts, and risk acceptances until they are resolved.Collaborate with technology, security, and business units to address gaps and enhance control effectiveness.Client & Regulatory EngagementSupport client due diligence, RFP security responses, and client-led audits.Translate technical and control-based requirements into clear, actionable business commitments.Build trusted relationships with clients by showcasing a mature and transparent compliance posture.Leadership & Global Team DevelopmentBuild and mentor a globally distributed team of audit and compliance professionals.Define roles, responsibilities, career paths, and training programs for audit and compliance staff.Encourage strong collaboration with security engineering, IT, legal, privacy, and risk teams.Required Qualifications
12+ years of experience in information security, audit, or compliance, with at least 5 years in senior leadership roles.Extensive hands-on experience leading ISO 27001, 27701, 27017, NIST, HIPAA, and client-specific security audits.Strong expertise in NIST CSF and NIST 800-53 governance, control design, and assessment.Proven experience in building or scaling global audit and compliance delivery models.Robust understanding of information security controls, risk management, and regulatory expectations.Excellent communication skills with the ability to engage executives, auditors, and clients effectively.Preferred Qualifications
Experience working in global, highly regulated environments.Familiarity with SOC 1 / SOC 2, cloud compliance, and third-party risk assessments.Experience implementing GRC tools to support audit and compliance workflows.Professional certifications such as CISSP, CISA, CRISC, CISM, ISO 27001 Lead Auditor, or equivalent.The base salary range for this position is between $172,000 and $250,000. Compensation decisions will be made at Grant Thornton's discretion based on various factors, including job-related knowledge, experience, geographic location, and internal equity.
At Grant Thornton, we emphasize building personal relationships and establishing trust in every aspect of our work. Join us to explore a career that offers more opportunities, flexibility, and support.
Grant Thornton is part of a multinational network, providing access to member firms in more than 150 global markets.
Work Environment: This position adheres to a hybrid work model, requiring in-person attendance at least three days per week, either at a Grant Thornton office or client site.
Benefits: We offer personalized and comprehensive benefits to support the diverse needs and experiences of our employees. Please visit our careers page for an overview of our benefit offerings.
Grant Thornton promotes equal employment opportunities and is committed to providing reasonable accommodations in accordance with the Americans with Disabilities Act for qualified applicants and employees with disabilities.
Grant Thornton will consider all qualified applicants, including those with criminal histories, according to applicable laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance.