Amazon Web Services (AWS), Artificial Intelligence (AI), Cross-Functional, ERP (Enterprise Resource Planning), Government, Government Organizations, ISO (International Organization for Standardization), Incident Response, Internet Security, Java, Leadership, Local Government, Maintain Compliance, Operations, Operations Management, PCI, Risk Management, Security Monitoring, U.S. National Institute of Standards and Technology (NIST)
LOCATION
Atlanta, GA
POSTED
15 days ago
We are looking for a Director of Security, Compliance & AI Governance. This is a hands-on security leader role to own compliance, AI governance, and daily security operations for an ERP platform supporting local government organizations. This individual will lead security and compliance initiatives across the organization and partner with cross-functional teams to implement and maintain security standards and governance processes.
Responsibilities:
Own and manage the company’s SOC 2 program
Lead PCI compliance efforts from initial buildout through attestation
Establish and maintain Data Governance and AI Governance processes
Oversee daily security operations, risk management, and incident response activities
Partner with Engineering, Product, Infrastructure, and Leadership teams to implement security and compliance initiatives
Develop and maintain security policies, standards, and governance procedures
Influence cross-functional teams to drive security-related changes and initiatives
Serve as a primary point of contact for security and compliance matters with customers and auditors
Requirements:
8 years of security or cybersecurity experience
3 years of compliance ownership experience
Hands-on experience managing SOC 2 compliance
Experience leading PCI compliance initiatives from initial implementation through attestation
Experience with AI Governance or AI risk management
Strong understanding of security operations and governance practices
Ability to work cross-functionally and influence organizational change
Preferred Skills:
Experience supporting public sector or regulated-data environments
Experience with NIST, CJIS, ISO 27001, FedRAMP or similar security frameworks
Technical background with AWS and Java environments
Experience presenting to executive leadership or boards