Senior Director Analyst – Cybersecurity Governance, Risk & Compliance

About the role

This senior director analyst position focuses on shaping executive‑level cybersecurity governance, risk and compliance (GRC) strategies for global enterprises. You will combine deep technical expertise with strategic advisory skills to help organisations navigate complex cyber‑risk landscapes and evolving regulatory requirements.

Key responsibilities

• Develop and deliver forward‑thinking research, frameworks, and strategic guidance on Cybersecurity GRC.
• Advise enterprise leaders on cyber‑risk identification, assessment, mitigation and governance best practices.
• Analyse global market trends, emerging threats and regulatory developments to provide actionable recommendations.
• Conduct client‑facing engagements such as virtual consultations, executive briefings, workshops and conference presentations.
• Lead discussions around compliance frameworks and standards including GDPR, ISO 27001, NIST, PCI DSS, HIPAA, SOX.
• Collaborate with cross‑functional teams to improve research quality and service excellence.
• Mentor junior analysts and foster a high‑performance knowledge‑sharing culture.

Required profile

• 12+ years of experience in Cybersecurity GRC, Information Security or Enterprise Risk Management, including leadership responsibilities.
• Strong expertise in cyber governance frameworks, enterprise risk assessment methodologies and regulatory compliance programs.
• Proven experience implementing or advising on risk analysis methodologies such as FAIR or NIST RMF.

Required skills

• FAIR risk analysis methodology
• NIST RMF
• GDPR
• CCPA
• HIPAA
• PCI DSS
• ISO 27001
• SOX