Technology Director - Governance, Risk, and Compliance (GRC)

Responsibilities

• Own end-to-end GRC delivery, ensuring effective controls, risk management, and measurable maturity
• Define and execute GRC strategy, including risk management, compliance, and policy governance aligned to global standards
• Translate the threat landscape and regulatory requirements into multi-quarter security programs and roadmaps
• Support SOX through second line-of-defense responsibilities and support first line control owners
• Lead and develop multiple teams, building a strong leadership bench and scalable operating model
• Oversee cybersecurity risk assessments, control effectiveness, and mitigation strategies
• Manage executive reporting on security posture, risk, and compliance to drive informed decision-making
• Lead budget, investment planning, and resource allocation aligned to risk-based priorities

Requirements

• 12–15+ years of experience in cybersecurity, technology risk, or related fields
• 4+ years in senior leadership roles managing multi-team functions
• Bachelor’s degree in a STEM field or related discipline
• Deep knowledge of security frameworks and regulatory requirements including NIST, ISO 27001, SOX, GDPR, and PCI
• Proven ability to translate complex risk landscapes into executable business strategies

Benefits

• Extended health, dental, and mental health plans
• Paid time off and savings/retirement plan matching
• Generous employee discount
• Fitness and yoga classes
• Parenthood top-up and professional development opportunities

About the Company

lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. We focus on creating transformational products and experiences that support people in moving, growing, connecting, and being well.