Director, Technology Risk & Digital Enablement

McCormick & Company • Hunt Valley, MD

4d • Hybrid

About The Position

McCormick is seeking a Director, Technology Risk & Digital Enablement to join the Global Risk and Audit Management (GRAM) team at its Global Headquarters in Hunt Valley, Maryland. This is a hybrid-eligible position, requiring 50% onsite presence per month. The role is a key leadership position reporting to the Chief Risk & Audit Officer (CRAO) and is responsible for advancing the global technology and cyber risk agenda within GRAM. The individual will also serve as the function’s digital transformation champion, driving the adoption of analytics, automation, and emerging technologies to enhance audit activities. This dual-mandate role requires comfort in presenting technology risk insights to the Audit Committee and building data analytics roadmaps with audit teams.

Requirements

• Bachelor’s degree in Information Systems or related field.
• CISA, CISM, CISSP certification or equivalent.
• 10+ years of progressive experience in technology audit, IT risk management, or information security.
• At least 4 years in a leadership role, including interaction with senior management.
• Experience managing cross-regional or multi-country audit programs, with specific exposure to emerging markets with regions.
• Strong track record of leading high-performing audit teams and developing talent at all levels.
• Exceptional communication, influencing, and executive presence skills — ability to present complex risk and audit topics to C-suite and Board audiences.
• Proficiency with audit management and GRC technology platforms (e.g., Optro, Workiva, Archer, or equivalent).
• Thorough knowledge of IT Operational Functions including IAM, Asset Management, Cybersecurity, Data Privacy.
• Demonstrated experience leading or materially contributing to a digital transformation or data analytics program within an audit or risk function.
• Thorough understanding of internal auditing standards, PCAOB auditing standards, COSO, SOX, US GAAP and risk assessment practice.
• Robust understanding of regulatory and external requirements as they relate to IT, privacy and cybersecurity for regulations such as GDPR, NERC-CIP and SOX.
• Proven track-record of implementing technology enablers such as data analytics, AI, etc. to modernize risk & audit capabilities.
• Proven ability to handle scale, change agenda, pace and overall complexity.
• Experience implementing and managing change within an organization, taking steps to remove barriers or to accelerate its pace.
• Track record of working alongside business leaders, positioning internal audit as a strategic partner, identifying and helping mitigate risk.
• Superior business acumen; ability to build strong relationships and trust with company leadership and business process owners.
• Broad understanding of the inter-dependency between operational, technological, strategic and reputational risks as well as general compliance standards.
• Professional, self-starter, solution-minded, results oriented and approachable.
• Strong analytical and problem-solving skills with attention to detail and customer focus.
• Excellent organizational, time management and prioritization skills.
• Commitment to maintaining a high degree of discretion and confidentiality.

Nice To Haves

• CIA, CPA or equivalent.
• Large, multi-brand, global, public company experience preferred.
• M&A experience preferred.

Responsibilities

• Lead and own all GRAM workstreams related to the global Technology Risk Universe, ensuring comprehensive coverage of IT, cyber, data, cloud, AI, and third-party technology risks.
• Lead the planning, execution, and reporting of all technology advisory and assurance initiatives across infrastructure, applications, cybersecurity, data governance, and emerging technology.
• Serve as GRAM function’s primary interface with the Technology leadership team, including the CTO and CISO.
• Serve as the in-house expert on Technology matters related to Sarbanes-Oxley (SOX), corporate governance, and enterprise risks.
• Provide expert opinion on technology risk matters to the CARO, Audit Committee, and senior management, translating complex technical risks into clear business language.
• Collaborate with other GRAM leadership to ensure risk management activities are well-defined, coordinated, risk-based, and executed.
• Stay current with the evolving technology risk landscape (e.g., cloud, AI/ML risk, ransomware, third-party digital risk) and ensure risk mitigation and audit plans remain relevant and forward-looking.
• Oversee quality assurance on technology audit engagements, ensuring findings are well-evidenced, rated consistently, and linked to business impact.
• Champion the adoption of digital tools and capabilities within Internal Audit, including data analytics, automation/AI-assisted audit techniques, and continuous monitoring.
• Define and execute a multi-year Digital Enablement Roadmap for the GRAM function, with measurable milestones and efficiency outcomes.
• Partner with Data & Analytics, IT, and external vendors to build and sustain function-specific data pipelines, dashboards, and automated testing capabilities.
• Identify and pilot emerging technologies (e.g., natural language processing for document review, anomaly detection, GRC platform enhancements).
• Embed data-driven risk management techniques into engagements, helping teams move from sample-based testing to population-level analysis.
• Track and report on digital enablement ROI, including efficiency gains, risk coverage expansion, and quality improvements.
• Recruit and retain top technology risk talent, building a team that blends deep technical expertise with strong business acumen.
• Lead, mentor, and develop a team of technology risk professionals (in-house and co-source provider), fostering a culture of continuous learning and innovation.
• Build digital literacy and data analytics skills across the broader audit function through training, coaching, and hands-on engagement.
• Act as a role model for intellectual curiosity and agile ways of working within a traditionally structured audit environment.

Benefits

• 401k
• health insurance
• paid time off
• Competitive compensation
• Career growth opportunities
• Flexibility and Support for Diverse Life Stages and Choices
• Wellbeing programs including Physical, Mental and Financial wellness
• Tuition assistance
• Comprehensive health plans covering medical, vision, dental, life and disability benefits
• Family-friendly benefits such as paid parental leave, fertility benefits, Employee Assistance Program, and caregiver support
• Retirement and investment programs including 401(k) and profit-sharing plans

What This Job Offers

• Job Type: Full-time
• Career Level: Director