Director, GRC

Ingersoll Rand Careers

3d • Remote

About The Position

Director of Governance, Risk, and Compliance (GRC)The Director of GRC leads Ingersoll Rand’s enterprise-wide governance, risk, and compliance program, driving global policies, controls, and third-party risk management to protect information assets and enable informed business decisions. This role partners with security leadership to strengthen the company’s security posture, align strategies with evolving technologies, and influence stakeholders across the organization.
This position reports to senior security or risk management leadership and serves as the primary steward of Ingersoll Rand’s global GRC program.

Requirements

• Cybersecurity Expertise – 15+ years in security analysis, compliance, risk management, or audit.
• Leadership Experience – 10+ years managing distributed teams with proven ability to lead and inspire.
• Regulatory Knowledge – Deep understanding of frameworks and laws including PCI, SOX, HITRUST, and GDPR.
• Project Leadership – Success managing initiatives involving both legacy and emerging technologies to mitigate risk and enforce security controls.
• Business Acumen – Strong grasp of business processes with the ability to integrate cybersecurity through collaboration and influence.

Nice To Haves

• Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and effective communication.
• Organized, efficient self-starter requiring minimal supervision.
• Understanding service design, delivery concepts, and control frameworks.
• Forward thinking with strong business acumen and flexibility.
• Highly focused on building and implementing a strong, cohesive team and security culture.
• Effective at stress management in a constantly changing environment.
• Outstanding written and verbal, business and cybersecurity communication skills.
• Certifications-- CISSP, CISM, CISA, CRISC preferable, but not required.

Responsibilities

• Lead enterprise-wide risk assessments and oversee IT compliance efforts, including audits and regulatory standards such as HITRUST, GDPR, and SOX.
• Direct and mentor the GRC team, driving security maturity, operational efficiency, and continuous improvement across privacy, resiliency, and compliance frameworks.
• Establish and enforce robust third-party risk management practices, including vendor assessments and security control validation during solution onboarding.
• Develop and maintain strategies for protecting critical information assets, including data classification, DLP, and adherence to records retention policies.
• Serve as a key liaison for audits and incident response, ensuring timely risk escalation, documentation, and actionable mitigation plans for leadership.
• Align GRC initiatives with enterprise risk management principles, define program metrics, and communicate requirements effectively across business units.
• Perform additional duties as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Number of Employees: 5,001-10,000 employees