Senior Director, Security Governance

IrelandRemote

Responsibilities

Continuous Compliance & Audit: Manage compliance with frameworks (ISO 42001,ISO 27001, ISO 27701, ISO 27017, and SOC2, and CIS Controls) and drive continuous compliance rather than just annual audits.

Reporting to the CISO, you have a vision for how AI will be used to transform the GRC function at ZoomInfo, and the skills to execute your vision. You will also define the guardrails for safe AI innovation, balancing risk mitigation with speed of innovation.
Automation & Reporting: Leverage Agentic AI and GRC platforms (ServiceNow GRC, Vanta, and others) to automate processes, generate metrics, and deliver executive dashboards.
Expertise: Deep knowledge of risk frameworks (NIST AI RMF) and security compliance standards (ISO, SOC 2).
Education: Bachelor’s degree in a relevant field (Master’s/PhD preferred).
Certifications: CISSP, CISM, CRISC, or CISA strongly preferred. #LI-AP3 #LI-Remote About us:
ZoomInfo (NASDAQ: GTM) is the Go-To-Market Intelligence Platform that empowers businesses to grow faster with AI-ready insights, trusted data, and advanced automation.

Experience: 10+ years in info security/GRC, including 5+ years in a senior leadership role.

We move fast, think boldly, and empower you to do the best work of your life.
You’ll be surrounded by teammates who care deeply, challenge each other, and celebrate wins.
your impact and a culture that backs your ambition, you won’t just contribute. You’ll make things happen–fast.
Reporting to: Chief Information Security Officer Job Summary:
ZoomInfo is seeking a strategic and action-oriented Senior Director of Security Governance, Risk, & Compliance (GRC) to mature our enterprise-wide governance, risk, and compliance function.
You will build and lead a high-performing team based in the US and India to secure our digital growth, manage third-party risk, and simplify audit readiness, ensuring security is a competitive advantage rather than a barrier. You are also a strong and active contributor who is comfortable as a player-coach, getting into the details alongside your team. What You’ll Do:
GRC Strategy & Leadership: Define and execute a GRC roadmap, leading governance, risk, and compliance programs.
Risk Management: Design and maintain the enterprise risk register, partnering with business leaders to identify, quantify, and mitigate risks.
Third-Party Risk (TPRM): Build and manage a right-sized vendor risk program, assessing vendor maturity and reviewing security contracts.
Security Sales Support: Enable ZoomInfo transaction velocity and ensure customer service by building customer trust and rapidly responding to inquiries