Director of Security Risk Compliance

GBS International, Inc. is a full-service organization delivering world-class solutions to the vacation ownership industry. Through innovation, operational excellence, and a customer-centric approach, we provide exceptional experiences for our clients and customers while maintaining the highest standards of service, security, and compliance.As we continue to grow, we are seeking an experienced security executive to lead our enterprise security strategy and strengthen our cybersecurity, governance, risk, and compliance capabilities.About the Role
The Director, Security, Risk & Compliance is responsible for leading the organization's enterprise-wide security program, including cybersecurity, information security, governance, risk and compliance (GRC), physical security, audit management, workforce security, business continuity, and secure software development.Reporting to executive leadership, this role will shape the company's security strategy, protect critical assets, and ensure compliance with regulatory requirements and client expectations while enabling business growth through effective risk management.
What You'll DoAs Director, Security, Risk & Compliance, you will:Develop and execute the organization's enterprise security strategy.Lead cybersecurity operations, including incident response, vulnerability management, threat detection, and security monitoring.Establish governance frameworks, security policies, standards, and enterprise risk management practices.Oversee compliance with applicable regulations, industry frameworks, contractual obligations, and client security requirements.Lead internal and external security audits and drive continuous compliance initiatives.Direct physical security programs across corporate offices and operational facilities.Build and maintain third-party risk management and vendor security programs.Oversee Business Continuity Planning (BCP), Disaster Recovery (DR), and Incident Response Planning (IRP).Lead penetration testing, security assessments, and security validation activities.Partner with Engineering and DevOps teams to implement Secure SDLC practices and application security controls.Promote security-by-design across cloud infrastructure, enterprise systems, and software development.Drive adoption of AI-enabled security technologies and establish governance for responsible AI usage.Collaborate with Human Resources on workforce security, insider risk, onboarding, offboarding, and security awareness initiatives.Partner with executive leadership to communicate enterprise security risks, strategic priorities, and security performance.Manage security budgets, technology investments, key performance indicators (KPIs), and key risk indicators (KRIs).
Required QualificationsBachelor's degree in Information Security, Computer Science, Risk Management, Criminal Justice, or a related field.10+ years of progressive experience in cybersecurity, information security, governance, risk, compliance, or enterprise security.5+ years leading enterprise security programs or security organizations.Demonstrated experience serving in a senior security leadership role (Director, CISO, CSO, or equivalent).Strong knowledge of cybersecurity operations, enterprise risk management, governance, compliance, physical security, audit management, and business resilience.Experience leading cross-functional initiatives involving technology, legal, HR, operations, and executive leadership.Excellent leadership, communication, analytical, and crisis management skills.Professional fluency in English and Spanish.
Preferred QualificationsMaster's degree in Cybersecurity, Information Security, Business Administration, or a related discipline.Professional certifications such as CISSP, CISM, CISA, CRISC, CPP, PSP, or ISO/IEC 27001 Lead Implementer/Auditor.Experience with ISO 27001, SOC 2, PCI DSS, NIST Cybersecurity Framework, or similar industry standards.Experience within SaaS, BPO, technology, hospitality, financial services, or other highly regulated environments.Experience presenting security strategy and enterprise risk to executive leadership or Boards of Directors.
Why Join GBS International?Lead enterprise-wide security strategy with executive visibility.Build and mature a modern cybersecurity and risk management program.Influence strategic business decisions across a growing international organization.Collaborate with leaders across technology, operations, human resources, legal, and finance.Help shape the future of security, governance, and resilience through innovation and emerging technologies.