Procter & Gamble · 2 months ago
Information Security - Governance, Risk, and Compliance (GRC) Director
Procter & Gamble is a leader in consumer goods, seeking a Governance, Risk, and Compliance Director passionate about safeguarding data and shaping the future of cybersecurity. The role involves managing risk identification, assessment, and remediation, while ensuring regulatory compliance and aligning the security program with business goals.
BeautyBrand MarketingCleaning ProductsConsumer GoodsCosmeticsNutritionPersonal Health
Responsibilities
Maintain and evolve the information security policy framework and controls aligned with industry best practices (e.g., NIST, ISO 27001, CIS)
Establish and track metrics to measure policy adherence and program maturity
Drive internal alignment on security roles, responsibilities, and expectations
Manage the enterprise risk management process including risk identification, analysis, treatment planning, and reporting
Conduct security risk assessments for internal systems, projects, vendors, and business processes
Facilitate risk-based decision-making at all levels of the organization
Ensure ongoing compliance with applicable regulations and frameworks (e.g., GDPR, HIPAA, CCPA, SOX)
Maintain a library of evidence and documentation to support audit and regulatory needs
Monitor the effectiveness of IT controls and identify gaps in compliance. Analyze control measurements for negative trends and reoccurrence frequency. Collaborate with internal/external auditors on compliance audits, audit findings, and issue remediation
Contribute to the continuous improvement of the risk and compliance mindset across P&G. Build IT risk awareness by providing support and training to others
Collaborate cross-functionally with IT, Legal, Privacy, and Business Operations teams
Stay up to date with how current events, security focus areas, and the regulatory environment may impact P&G’s compliance processes
Qualification
Required
Experience in Governance, Risk, and Compliance (GRC) within an IT environment
Strong understanding of information security policy frameworks and controls aligned with industry best practices (e.g., NIST, ISO 27001, CIS)
Proven ability to manage enterprise risk management processes including risk identification, analysis, treatment planning, and reporting
Experience conducting security risk assessments for internal systems, projects, vendors, and business processes
Ability to ensure ongoing compliance with applicable regulations and frameworks (e.g., GDPR, HIPAA, CCPA, SOX)
Experience in maintaining documentation to support audit and regulatory needs
Ability to monitor the effectiveness of IT controls and identify gaps in compliance
Experience collaborating with internal/external auditors on compliance audits and issue remediation
Strong communication skills to build IT risk awareness and provide support and training to others
Ability to collaborate cross-functionally with IT, Legal, Privacy, and Business Operations teams
Up-to-date knowledge of current events, security focus areas, and the regulatory environment impacting compliance processes
Company
Procter & Gamble
P&G was founded more than 185 years ago as a soap and candle company.
H1B Sponsorship
Procter & Gamble has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (7)
2024 (10)
2023 (5)
2022 (6)
2021 (7)
2020 (11)
Funding
Current Stage
Public CompanyTotal Funding
$2.75B2025-05-01Post Ipo Debt· $1.25B
2024-05-02Post Ipo Debt· $1.5B
2021-04-18Undisclosed· $0.3M
Leadership Team
Recent News
Morningstar.com
2025-11-03
2025-08-18
Company data provided by crunchbase