Vice President, Security Controls & Compliance

This role reports to the Senior Vice President, Governance, Risk & Compliance and plays a key leadership role in advancing a modern, scalable, and data-driven cybersecurity governance program. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

Role Overview and Core Responsibilities

Define and execute the enterprise cybersecurity governance and compliance strategy, including policies, standards, control frameworks, and operating processes that align with business priorities and risk appetite .
Establish governance processes and metrics that give executive leadership, regulators, and the Audit Committee clear visibility into cyber risk, control effectiveness, compliance posture, audit results, and emerging risks .
Oversee global cybersecurity compliance programs and readiness for regulatory examinations, external assessments, contractual obligations, and requirements including PCI DSS, SOX, NIST CSF, ISO 27001, privacy regulations, and customer security expectations .
Serve as executive sponsor for cybersecurity audits, assessments, and examinations; partner with Internal Audit and business stakeholders to strengthen assurance and drive timely remediation of findings and control deficiencies .
Lead enterprise cyber risk and control assessments, identify gaps, prioritize remediation, and establish accountability mechanisms that support risk reduction and issue closure .
Translate technical security issues into business-focused risk discussions and ensure material cybersecurity risks are appropriately communicated and escalated .
Modernize cyber governance, risk, and compliance capabilities through automation, modern GRC platforms, and AI-enabled processes that improve scale, consistency, and decision support .
Lead and develop a global team responsible for governance, compliance, policy, audit coordination, and control assurance, fostering accountability, transparency, innovation, and operational excellence .
Build strong partnerships across Technology, Product, Legal, Privacy, Risk, Internal Audit, and business functions to address evolving regulatory requirements and enable enterprise-wide change .