Governance, Risk, and Compliance and Data Privacy Office Director

Dow•Midland, MI

9d•Hybrid

About The Position

Dow has an exciting opportunity for a Governance, Risk, and Compliance and Data Privacy Director located in Midland, MI or Houston, TX. In this role, you will lead and direct multiple teams (typically through other people leaders) and apply in-depth knowledge of your area of responsibility. You will lead cyber governance, risk, compliance, data privacy, and develop and implement an evergreen enterprise-wide cyber awareness program to ensure effective risk oversight, regulatory adherence, and develop a strong cybersecurity culture.

Requirements

Risk-first mindset (non-negotiable) – uses compliance frameworks as tools, not goals; prioritizes exposure, control effectiveness and business impact
Ability to challenge the business with credibility – pushes back on weak controls and unclear risk acceptance; forces clarity on ownership and impact
Translates risks into business language – converts regulatory and control concepts into exposure, financial risk and operational impact
Governance builder (not just operator) – designs governance forums, decision rights and escalation paths that enforce accountability and consistency
Culture shaper – drives measurable shifts in how the organization thinks about and manages risk
Leadership: Demonstrates the ability to lead global teams, influence stakeholders, establish accountability, and drive enterprise-wide cybersecurity, risk, compliance, and data privacy initiatives.
Strategic Planning: Develops and implements long-term governance, risk management, compliance, and cybersecurity strategies that align with business objectives and regulatory requirements.
Decision Making: Evaluates complex cyber and privacy risks, prioritizes actions based on business impact, challenges inadequate controls, and drives informed risk acceptance decisions.
Communication: Effectively translates technical cybersecurity, regulatory, and data privacy concepts into clear business language for executives, stakeholders, and non-technical audiences.
Business Management: Oversees governance programs, compliance processes, audit readiness, risk reporting, external assessments, and organizational initiatives to ensure sustainable business outcomes.
A minimum of a bachelor’s degree or relevant military experience at or above a U.S. E5 ranking or Canadian Petty Officer 2nd Class or Sergeant.
Minimum 10 years of progressive experience in IT and/or Cybersecurity
Demonstrated leadership experience leading diverse global teams
Deep understanding of regulatory compliance, audit readiness, and risk management in regulated industries
Strong interpersonal, communication and stakeholder engagement skills across technical and non-technical audiences.
A minimum requirement for this U.S. based position is the ability to work legally in the United States. No visa sponsorship/support is available for this position, including for any type of U.S. permanent residency (green card) process.

Responsibilities

Own cyber security governance effectiveness – establish clear, enforceable policies, standards and control frameworks with unambiguous ownership and consistent application
Own cyber and data privacy risk identification and visibility – ensure internal and external risks are clearly defined in central risk register, quantified and reported. Actively challenge and escalate unacceptable risk
Own regulatory compliance and audit outcomes – ensure compliance is sustainable and audit-ready by design, with no reliance on reactive audit preparation and no recurring findings
Own external cyber assessments and certification to enable the business (e.g. customer cyber assessment, ISO 270001, NIST CSF, etc)
Own security culture and behavior change outcomes – drive measurable improvements in workforce cyber and data privacy behaviors

Benefits

Equitable and market-competitive base pay and bonus opportunity across our global markets, along with locally relevant incentives.
Benefits and programs to support your physical, mental, financial, and social well-being, to help you get the care you need...when you need it.
Competitive retirement program that may include company-provided benefits, savings opportunities, financial planning, and educational resources to help you achieve your long term financial-goals.
Employee stock purchase programs (availability varies depending on location).
Student Debt Retirement Savings Match Program (U.S. only).
Dow will take the value of monthly student debt payments and apply them as if they are contributions to the Employees’ Savings Plan (401(k)), helping employees reach the Company match.
Robust medical and life insurance packages that offer a variety of coverage options to meet your individual needs. Travel insurance is also available in certain countries/locations.
Opportunities to learn and grow through training and mentoring, work experiences, community involvement and team building.
Workplace culture empowering role-based flexibility to maximize personal productivity and balance personal needs.
Competitive yearly vacation allowance.
Paid time off for new parents (birthing and non-birthing, including adoptive and foster parents).
Paid time off to care for family members who are sick or injured.
Paid time off to support volunteering and Employee Resource Group’s (ERG) participation.
Wellbeing Portal for all Dow employees, our one-stop shop to promote wellbeing, empowering employees to take ownership of their entire wellbeing journey.
On-site fitness facilities to help stay healthy and active (availability varies depending on location).
Employee discounts for online shopping, cinema tickets, gym memberships and more.
Transportation allowance (availability varies depending on location)
Meal subsidiaries/vouchers (availability varies depending on location)
Carbon-neutral transportation incentives e.g. bike to work (availability varies depending on location)