Senior Director of Security Governance, ZoomInfo
Market intelligence and contact details database
Be an early applicant
Market intelligence and contact details database
1001+ employees
Be an early applicant
1001+ employees
Company mission
To unlock the growth potential of professionals and businesses with a modern end-to-end revenue operating system.
Role
Who you are
- Experience: 10+ years in info security/GRC, including 5+ years in a senior leadership role
- Expertise: Deep knowledge of risk frameworks (NIST AI RMF) and security compliance standards (ISO, SOC 2)
- Actionable Leadership: Proven track record of scaling security teams, maturing programs, and building "security-by-design" cultures
- Executive Presence: Ability to translate complex technical risks into business-relevant context for executive leadership and customers
- Education: Bachelor’s degree in a relevant field (Master’s/PhD preferred)
- Certifications: CISSP, CISM, CRISC, or CISA strongly preferred
What the job involves
- Reporting to: Chief Information Security Officer
- ZoomInfo is seeking a strategic and action-oriented Senior Director of Security GRC to mature our enterprise-wide governance, risk, and compliance function
- Reporting to the CISO, you have a vision for how AI will be used to transform the GRC function at ZoomInfo, and the skills to execute your vision
- You will also define the guardrails for safe AI innovation, balancing risk mitigation with speed of innovation
- You will build and lead a high-performing team based in the US and India to secure our digital growth, manage third-party risk, and simplify audit readiness, ensuring security is a competitive advantage rather than a barrier
- You are also a strong and active contributor who is comfortable as a player-coach, getting into the details alongside your team
- GRC Strategy & Leadership: Define and execute a GRC roadmap, leading governance, risk, and compliance programs
- Risk Management: Design and maintain the enterprise risk register, partnering with business leaders to identify, quantify, and mitigate risks
- Continuous Compliance & Audit: Manage compliance with frameworks (ISO 42001,ISO 27001, ISO 27701, ISO 27017, and SOC2, and CIS Controls) and drive continuous compliance rather than just annual audits
- Third-Party Risk (TPRM): Build and manage a right-sized vendor risk program, assessing vendor maturity and reviewing security contracts
- Security Sales Support: Enable ZoomInfo transaction velocity and ensure customer service by building customer trust and rapidly responding to inquiries
- Automation & Reporting: Leverage Agentic AI and GRC platforms (ServiceNow GRC, Vanta, and others) to automate processes, generate metrics, and deliver executive dashboards
- Cross-Functional Influence: Act as the key liaison between Security, Legal, Product, and executive leadership to align risk posture with business objectives
Our take
It was only a few years ago when B2B sales teams relied on warm introductions and contact books. Now, cloud-based CRM, automation and Big Data are critical tools for any selling process. ZoomInfo’s B2B contact base has played a massive part in that journey.
The company primarily helps salespeople find potential customers. Crucially, ZoomInfo then leverages technology to help make that approach as successful as possible. Think contact details of the most likely budget holder at that company, signal for when and how to approach and crucial updates on the company’s fortunes.
ZoomInfo has grown significantly over the previous few years and is now shifting its approach to pursue more inorganic growth through mergers and acquisitions, acquiring several companies in 2022, including the job recruitment website Comparably.
The risk for ZoomInfo is that these moves represent expansion beyond its traditional strengths in top-of-funnel customer acquisition. The company will need to ensure that it maximises synergies in order to win in these markets. The company has expanded operations in India and is set to see further expansion, as indicated by its appearance on the Fortune Future 50 list of robust and growing companies in 2023.
Freddie
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (1 round)
Jul 2004
$7m
SERIES A
Total funding: $7m
Company benefits
- Benefits for the Best You - We want our employees and their families to thrive. In addition to comprehensive benefits we offer holistic mind, body and lifestyle programs designed for overall well-being
- Base Pay - We attract and retain the best talent with competitive compensation that aligns with industry benchmarks and merit programs yearly for promotions and salary increases based on performance, time in role, and position to market
- Bonus - When you crush it, we like to celebrate! Bonuses are awarded annually in connection with company and individual performance
- Equity - We offer each employee a generous equity award in the form of RSUs, so they can directly feel the results and success of their hard work
- Vacation & Time Off - We know everyone's needs are different so we offer flexible paid time off plans including an unlimited vacation option for many employees
- Hybrid Working Model - We offer flexible hybrid remote working models to promote equity, employee wellness, and work life balance
Company HQ
Vancouver
Leadership
Henry Schuck
(Founder & CEO)Originally founded DiscoverOrg which went on to become ZoomInfo through an acquisition in 2019.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 44 more jobs at ZoomInfo