Director I, Security Compliance

Reports to: Director II, Security Compliance

Location: Must be local to Dallas, TX or Scottsdale, AZ

Synonymous Business Title: Director I, GRC

About Blue Yonder and the Team:

Blue Yonder is a world leader in digital supply chain transformation. Retailers, manufacturers, and logistics providers across the globe rely on our AI-driven platform to plan, execute, and optimize the flow of goods from source to consumer. Our software touches the operations of some of the most recognizable brands in the world, which means the trust our customers place in the security, resilience, and integrity of our services is central to everything we do.

The Blue Yonder Governance, Risk, & Compliance team protects that trust. We build and operate the programs that keep Blue Yonder secure, compliant, and audit-ready across a broad portfolio of SaaS products and the cloud platforms that run them. This is a role for a leader who wants their work to be visible to customers, regulators, and executives alike — and who sees compliance not as a checkbox exercise, but as a durable business enabler.

Overview:

The Director I, GRC leads the Compliance and Assurance team responsible for planning, executing, and maintaining Blue Yonder’s portfolio of information security and IT compliance certifications and attestations. Reporting to the Director II, GRC, you will own the end-to-end audit and compliance function — scoping, evidence, control operation, audit management, and reporting — across a multi-product, multi-cloud environment.

You will lead a team of compliance professionals delivering ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, and Sarbanes-Oxley / IT General Controls (ITGC) audits, alongside other information security–based assessments across the Blue Yonder portfolio of services.  Additionally, you will identify and drive efforts to improve overall compliance health and maturing compliance operations through automation of previously manual activities.

What You’ll Do:

• Lead, develop, and mentor a team of compliance professionals responsible for delivering Blue Yonder’s information security certifications and attestations as well as supporting compliance operations.
• Set direction and drive priorities to meet compliance needs for new products, contractual obligations, and changing security regulations.
• Own the end-to-end compliance and audit lifecycle across products and internal systems.  This includes scoping, mapping controls, monitoring controls, audit coordination, evidence collection, issue remediation, management review, and final reporting.
• Manage external auditors as the primary point of accountability — negotiating scope, timelines, and sampling, and driving clean, defensible outcomes.
• Partner with Engineering, Product, Legal, Internal Audit, and other Security teams to maintain control operation and support recurring compliance activities.
• Maintain cross-framework control library that allows for a control to satisfy multiple obligations as well as scale to accommodate technologies such as AI as well as changing regulations
• Stand up and scale emerging frameworks including ISO 42001 for AI management systems, aligning Blue Yonder’s AI governance and responsible-AI practices with certification requirements.
• Drive continuous compliance by championing automation, evidence pipelines, and GRC tooling that shift the program from periodic firefighting toward always-audit-ready operation.
• Lead customer compliance assurance activities that include responding to customer security questionnaires, due diligence requests, and customer audits

What We’re Looking For:

Required Qualifications:

• Minimum 8 to 10+ years of progress experience in IT Security, Security Compliance or Audit within an enterprise SaaS environment.
• Minimum 1 year of experience leading teams (direct reports). 
• Hands-on experience designing and executing control testing programs and managing external audits in a multi-cloud environment.
• Experience supporting B2B customers through security questionnaires, due diligence requests, and audits.
• Strong written and verbal communication skills with ability to drive change and report on compliance at all levels of the organization.

Preferred Qualifications:

• Experience with ISO 42001 or AI governance frameworks.
• Experience developing and maintaining a cross-framework control library that maps to multiple security standards and regulations.
• Strong grounding in the NIST family of standards, including NIST SP 800-53 and the NIST Cybersecurity Framework, and experience mapping across frameworks.
• Relevant certifications such as CISA, CISM, CISSP, CIPP, ISO 27001 Lead Auditor / Lead Implementer, or equivalent.
• Experience in supply chain, logistics, or enterprise SaaS, and comfort operating in a fast-moving, AI-driven product organization.

#LI-MH1

-------------------------------------------

The base annual salary range for this position is $142,152 - $175,000.

The salary range information provided, reflects the anticipated base salary range for this position based on current national data.  Minimums and maximums may vary based on location.  Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors.  In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes: 

• Comprehensive Medical, Dental and Vision 

• 401K with Matching 

• Flexible Time Off 

• Corporate Fitness Program 

• A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.