Director of Governance and Compliance

Location: Minneapolis, MN (Hybrid-remote)

Job Type: Full-Time

Target Salary Range*: $200,000 - $230,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

The Director of Governance and Compliance leads the strategic development, implementation, and oversight of a comprehensive compliance, privacy, governance, and risk management framework aligned with corporate business objectives, regulatory requirements, and industry best practices.

This role is responsible for ensuring organizational operations and practices comply with applicable state, federal, and international laws, regulations, contractual obligations, and industry standards while effectively identifying, assessing, and mitigating organizational risk.

The Director of Governance and Compliance partners closely with the Director of Information Security and cross-functional business leaders to integrate compliance initiatives with broader security, operational, and business strategies.

• Maintain a current understanding of business activities and applicable state, federal, and international laws and regulations.
• Serve as the organization’s subject matter expert for governance, compliance, privacy, and regulatory requirements.
• Ensure regulatory requirements and compliance practices are incorporated into business initiatives throughout the development lifecycle.
• Identify, plan, prioritize, and manage organizational compliance and privacy activities based on risk.
• Develop and maintain an annual compliance plan and associated governance cycle.
• Manage compliance efforts across the organization to support adherence to applicable laws, regulations, and standards, including GDPR, 21 CFR Part 11, HITRUST, ISO 27001, HIPAA, NIST 800-53, and applicable AI frameworks.

• Develop, implement, and maintain the organization’s Governance, Risk, and Compliance policies, procedures, and frameworks.
• Develop and implement compliance, risk, and privacy frameworks that support resilient business services, architectures, and processes.
• Ensure governance and compliance programs align with business objectives, regulatory requirements, and organizational risk tolerances.
• Translate regulatory requirements into actionable business unit initiatives and priorities.
• Serve as a trusted advisor to business unit leadership on compliance, privacy, governance, and risk matters.

• Lead the company-wide Enterprise Risk Management program.
• Collaborate with Product, Engineering, Business Operations, Sales, Support, Legal, Human Resources, and other operational teams to identify, evaluate, and mitigate risk.
• Maintain ongoing risk assessment and monitoring processes.
• Develop and implement effective risk mitigation strategies.
• Proactively identify emerging compliance and regulatory risks and recommend corrective actions.

• Oversee internal and external audit assessments.
• Evaluate compliance with internal policies, regulatory requirements, contractual obligations, and applicable industry standards.
• Coordinate audit readiness activities and support remediation of identified findings.
• Assist with preparation of Regulatory Affairs briefings for the Executive Committee, Board of Directors, and Compliance Committees.

• Lead Third-Party Supplier Management risk assessments and associated governance programs.
• Ensure third-party risk management activities align with business objectives and organizational risk tolerances.
• Manage supply chain risk processes,…