Director, IT Governance, Risk & Compliance
Danaher Corporation
Summary
The Director, IT Governance, Risk & Compliance is responsible for the performance of compliance standings on behalf of IT, including IT SOX, PCI-DSS, and General Controls, in appropriate conjunction with business peers. This role provides strategic leadership for IDT's IT compliance and SOX control environment and is accountable for establishing a sustainable, risk-based compliance program that supports reliable financial reporting, effective technology governance, and informed enterprise risk decisions.
Job description
In this role, you will have the opportunity to:
- Set the strategy and governance model for IT compliance, establishing policies, standards, procedures, accountability, and executive visibility across the control environment.
- Direct the annual IT SOX program and audit, ensuring risk-based scope, effective controls, successful audit execution, and timely resolution of findings.
- Provide oversight of business process controls, IT General Controls, automated application controls, and other technology-dependent controls, ensuring their design and performance remain aligned with financial reporting risks and changes in the technology environment.
- Own the integrity of the IT risk and control framework, including governance of Risk and Control Matrices and the standards used to maintain clear, accurate, and sustainable compliance documentation.
- Lead resolution of significant control gaps and emerging risks, setting priorities, holding stakeholders accountable for sustainable remediation, and providing the CIO with accurate assessments of compliance performance and enterprise risk actions.
- Own strategic business partnerships with IT leaders across multiple affiliated companies, building trusted relationships and leading shared compliance priorities, projects, and best practices across participating IT organizations.
- Lead and develop the IT compliance team, translating strategy into priorities, building capability, and improving the effectiveness and scalability of the compliance program.
The essential requirements of the job include:
- Bachelor's degree in information systems, computer science, cybersecurity, business, or a related field with 10 or more years of relevant experience including managing Risk, Governance or Compliance in IT.
- Understanding of Auditing Frameworks (ISO27001, ISO27002, ISO17799) and their successful implementation in a dynamic and growing organization.
- Experience in both SOX Compliance & PCI-DSS annual cycles.
- Relevant experience must include progressive responsibility in IT audit, IT compliance, technology risk, internal controls, or a related technology field, including leadership of multiple annual SOX cycles.
- Minimum 3 years of people leadership experience, including responsibility for strategy, priorities, talent development, performance management, and delivery through a team.
- Experience supporting major enterprise platforms, ERP environments, cloud services, system implementations, acquisitions, or technology transformation programs.
- Ability to travel – 10-20%.
It would be a plus if you also possess previous experience in:
- Experience with SAP, D365 ERPs is a plus.
- Experience in MedTech, LifeScience industry is a plus.
- CISA, CRISC, CISM, or a comparable technology risk or security certification preferred.
Requirements
- Bachelor's degree in information systems, computer science, cybersecurity, business, or a related field
- 10 or more years of relevant experience including managing Risk, Governance or Compliance in IT
- Understanding of Auditing Frameworks (ISO27001, ISO27002, ISO17799) and their successful implementation
- Experience in both SOX Compliance & PCI-DSS annual cycles
- Progressive responsibility in IT audit, IT compliance, technology risk, internal controls, or a related technology field
- Leadership of multiple annual SOX cycles
- Minimum 3 years of people leadership experience
- Experience supporting major enterprise platforms, ERP environments, cloud services, system implementations, acquisitions, or technology transformation programs
- Ability to travel 10-20%
- Experience with SAP, D365 ERPs is a plus
- Experience in MedTech, LifeScience industry is a plus
- CISA, CRISC, CISM, or a comparable technology risk or security certification preferred
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Paid Time Off
- 401(k)
- Bonus/Incentive Pay
- Remote Work
Company overview
Danaher Corporation is a leading global science and technology innovator headquartered in Washington, D.C., specializing in biotechnology, life sciences, and diagnostics. Founded in 1984 by brothers Steven and Mitchell Rales, the company has evolved from its origins as a manufacturing conglomerate into a premier healthcare technology organization with approximately 63,000 employees worldwide. Danaher operates through three core divisions: biotechnology (28% of revenues), which develops products for therapeutic development; life sciences (31% of revenues), focused on disease identification, new therapies, and drug testing/manufacturing; and diagnostics (41% of revenues), providing instruments, consumables, and software for disease diagnosis. The company's portfolio includes renowned brands such as Beckman Coulter, Cytiva, Pall Corporation, Cepheid, Leica Microsystems, and Abcam, serving pharmaceutical companies, biotechnology firms, healthcare providers, and research institutions globally. Danaher is distinguished by its Danaher Business System (DBS), a continuous improvement methodology that drives innovation and operational excellence. With 2024 revenues of $23.9 billion, the company ranks 180th on the Fortune 500 and plays a critical role in advancing scientific research, improving diagnostic capabilities, and accelerating the development of life-saving therapies.