Senior Director Analyst – Cybersecurity Governance, Risk & Compliance

About the role

This senior director analyst position offers a high‑impact opportunity to shape executive‑level thinking on cybersecurity governance, risk and compliance (GRC) for global enterprises. You will blend deep technical expertise with strategic advisory skills to help organisations navigate complex cyber‑risk landscapes and evolving regulatory demands.

Key responsibilities

• Develop and deliver forward‑thinking research, frameworks and strategic guidance on Cybersecurity GRC.
• Advise enterprise leaders on cyber‑risk identification, assessment, mitigation and governance best practices.
• Analyse global market trends, emerging threats and regulatory developments to provide actionable recommendations.
• Conduct client‑facing engagements such as virtual consultations, executive briefings, workshops and conference presentations.
• Lead discussions around compliance frameworks and standards including GDPR, ISO 27001, NIST, PCI DSS, HIPAA, SOX.
• Collaborate with cross‑functional teams to improve research quality and service excellence.
• Mentor junior analysts and foster a high‑performance knowledge‑sharing culture.

Required profile

• 12+ years of experience in Cybersecurity GRC, Information Security or Enterprise Risk Management, including leadership responsibilities.
• Strong expertise in cyber governance frameworks, enterprise risk assessment methodologies and regulatory compliance programs.
• Proven experience implementing or advising on risk analysis methodologies such as FAIR or NIST RMF.
• Deep understanding of major cybersecurity compliance standards and regulations.

Required skills

• FAIR risk analysis methodology
• NIST RMF
• GDPR
• CCPA
• ISO 27001
• PCI DSS
• HIPAA
• SOX

What we offer

• Opportunity to influence global cybersecurity strategy.
• Collaborative, intellectually driven environment.
• Balance of independent research, client interaction and public speaking.