Director, Compliance (Cyber & Technology Regulatory Compliance)

Principal Financial Group•Des Moines, IA

9h•Hybrid

About The Position

At Principal, we're building a dedicated cyber and technology regulatory compliance capability within Enterprise Compliance. This role will play a critical part in establishing and evolving the framework, processes, and oversight activities needed to support a complex and rapidly changing cyber regulatory environment. As a Director, Compliance, you'll serve as a trusted advisor and subject matter expert on cybersecurity, data protection, and other technology-related regulations. You'll partner closely with technology and information security teams, Enterprise Risk, Legal, and business leaders to help strengthen compliance practices while providing independent oversight and credible challenge. This is a unique opportunity to help shape a program while supporting global technology and cybersecurity initiatives.

Requirements

10+ years of experience in compliance, risk management, legal, regulatory, cybersecurity governance, technology risk, or related disciplines.
Experience building, enhancing, or managing compliance programs.
Knowledge of cybersecurity, information security, technology risk, data protection, or operational resilience regulations.
Strong understanding of regulatory change management, compliance oversight, monitoring, and testing practices.
Experience partnering with senior leaders and influencing outcomes without direct authority.
Exceptional analytical, communication, and relationship-building skills.
Ability to translate complex regulatory requirements into practical business solutions.
Demonstrated curiosity, initiative, and a strategic mindset when solving complex compliance challenges.

Nice To Haves

Experience supporting financial services organizations.
Experience with cybersecurity regulatory frameworks and requirements, including New York DFS Cybersecurity Regulation (23 NYCRR 500), DORA, and other cybersecurity, data protection, and other technology-related regulations.
Experience supporting regulatory examinations and remediation efforts.
Experience developing compliance testing and monitoring programs.
Familiarity with cyber governance, risk, and compliance (GRC) programs.

Responsibilities

Lead regulatory change management efforts related to cybersecurity, data protection, and other technology-related regulations.
Monitor emerging regulatory requirements and industry developments, translating complex regulations into actionable business guidance.
Coordinate responses to regulatory examinations, inquiries, and assessments involving technology and cybersecurity regulations.
Develop and enhance compliance frameworks, processes, and controls supporting cyber and technology compliance obligations.
Build and oversee compliance testing and monitoring activities in partnership with enterprise testing teams.
Provide regulatory compliance guidance to technology, cybersecurity, and business stakeholders.
Research and interpret global cybersecurity and technology regulations and communicate impacts to leadership.
Support incident management, business continuity, and resilience activities from a regulatory compliance and oversight perspective.
Develop reporting and compliance communications for senior leaders and stakeholders.
Foster a culture of compliance through effective consultation, education, and partnership across the enterprise.