Director, Governance, Risk, and Compliance
@ SiriusXM

New York, NY
$200,000
On Site
Full Time
Posted 1 day ago

Your Application Journey

Personalized Resume
Apply
Email Hiring Manager
Interview

Email Hiring Manager

XXXXXXXXX XXXXXXXXXXXXX XXXXXX****** @siriusxm.com
Recommended after applying

Job Details

About SiriusXM

SiriusXM and its associated brands are leading a new era of audio entertainment, delivering compelling subscription and ad-supported experiences for listeners on the go. With diverse talent and authentic programming, SiriusXM helps shape the future of audio.

How You’ll Make An Impact

As the Director, Governance, Risk, and Compliance, you will lead enterprise-wide governance, risk management, and compliance programs. You will bridge executive leadership, legal, security, and operations to ensure secure, ethical, and compliant business operations.

What You’ll Do

  • Establish and communicate enterprise security and compliance policies.
  • Implement consistent governance practices across business units and tech functions.
  • Own the enterprise risk management framework: risk identification, assessment, and mitigation.
  • Deliver clear risk reporting to executives and the board.
  • Maintain compliance with frameworks like SOX, SOC 2, ISO 27001, and PCI-DSS.
  • Manage audits, certifications, and regulatory examinations with internal teams and external auditors.
  • Ensure vendor and third-party risk management is effective.
  • Collaborate with CISO, CIO, and General Counsel to integrate risk and compliance into strategy.
  • Support secure product development with a compliance-by-design approach.
  • Mentor and develop the GRC team to foster accountability and continuous improvement.
  • Oversee business continuity and disaster recovery planning programs.

What You’ll Bring

  • 10+ years in governance, risk, compliance, or information security with 5+ years in leadership.
  • Bachelor’s degree in Information Security, Risk Management, Business, or related field.
  • Deep knowledge of regulatory frameworks and industry standards: SOC 2, ISO 27001, SOX, PCI-DSS.
  • Proven success in leading enterprise risk management and compliance audits.
  • Strong ability to translate complex risk and compliance concepts into business language.
  • Experience building and scaling GRC teams in multi-technology environments.

Compensation and Equal Opportunity

The base salary is expected to be between $182,000 and $245,000, with potential incentives. SiriusXM provides a respectful, professional work environment and is an equal opportunity employer.

Key skills/competency

  • Governance
  • Risk Management
  • Compliance
  • Regulatory
  • Audit
  • Security
  • Leadership
  • Strategy
  • ERM
  • Vendor Management
Apply without a personalized resume

How to Get Hired at SiriusXM

🎯 Tips for Getting Hired

  • Research SiriusXM's culture: Understand their audio entertainment and tech vision.
  • Customize your resume: Highlight GRC experience and leadership roles.
  • Emphasize compliance achievements: Detail successes in regulatory frameworks.
  • Prepare for behavioral questions: Showcase cross-functional collaboration and decision-making.

📝 Interview Preparation Advice

Technical Preparation

Review SOC 2 and ISO 27001 standards.
Study enterprise risk management frameworks.
Practice audit and compliance documentation.
Familiarize with disaster recovery planning.

Behavioral Questions

Describe your leadership in risk management.
Explain a time you managed a complex audit.
Detail your cross-team collaboration experiences.
Discuss decision-making under compliance pressure.

Frequently Asked Questions