Director, Compliance; Cyber & Technology Regulatory Compliance

At Principal, we're building a dedicated cyber and technology regulatory compliance capability within Enterprise Compliance. This role will play a critical part in establishing and evolving the framework, processes, and oversight activities needed to support a complex and rapidly changing cyberregulatory environment.

As a Director, Compliance, you'll serve as a trusted advisor and subject matter expert on cybersecurity, data protection, and other technology-related regulations. You'll partner closely with technology and information security teams, Enterprise Risk, Legal, and business leaders to help strengthen compliance practices while providing independent oversight and credible challenge.

This is a unique opportunity to help shape a program while supporting global technology and cybersecurity initiatives.

• Lead regulatory change management efforts related to cybersecurity, data protection, and other technology-related regulations.
• Monitor emerging regulatory requirements and industry developments, translating complex regulations into actionable business guidance.
• Coordinate responses to regulatory examinations, inquiries, and assessments involving technology and cybersecurity regulations.
• Develop and enhance compliance frameworks, processes, and controls supporting cyber and technology compliance obligations.
• Build and oversee compliance testing and monitoring activities in partnership with enterprise testing teams.
• Provide regulatory compliance guidance to technology, cybersecurity, and business stakeholders.
• Research and interpret global cybersecurity and technology regulations and communicate impacts to leadership.
• Support incident management, business continuity, and resilience activities from a regulatory compliance and oversight perspective.
• Develop reporting and compliance communications for senior leaders and stakeholders.
• Foster a culture of compliance through effective consultation, education, and partnership across the enterprise.

• 10+ years of experience in compliance, risk management, legal, regulatory, cybersecurity governance, technology risk, or related disciplines.
• Experience building, enhancing, or managing compliance programs.
• Knowledge of cybersecurity, information security, technology risk, data protection, or operational resilience regulations.
• Strong understanding of regulatory change management, compliance oversight, monitoring, and testing practices.
• Experience partnering with senior leaders and influencing outcomes without direct authority.
• Exceptional analytical, communication, and relationship-building skills.
• Ability to translate complex regulatory requirements into practical business solutions.
• Demonstrated curiosity, initiative, and a strategic mindset when solving complex compliance challenges.

• Experience supporting financial services organizations.
• Experience with cybersecurity regulatory frameworks and requirements, including New York DFS Cybersecurity Regulation (23 NYCRR 500), DORA, and other cybersecurity, data protection, and other technology-related regulations.
• Experience supporting regulatory examinations and remediation efforts.
• Experience developing compliance testing and monitoring programs.
• Familiarity with cyber governance, risk, and compliance (GRC) programs.

This role will have limited overnight travel.

Salary ranges below reflect targeted base salaries. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation for all roles will be based upon geographic location, work…