Director of Information Security (GRC)

About the role

The Director, Information Security – GRC leads AVEVA’s Governance, Risk and Compliance function within the central Digital Security organisation. This senior second‑line role is responsible for the policies, standards and frameworks that protect AVEVA’s digital estate and for providing risk assurances to executive leadership and the parent company.

Key responsibilities

• Define, maintain and enforce security policies, standards and governance frameworks across the organisation.
• Report security risk and compliance status to executive leadership and parent‑company governance bodies.
• Build and lead a global GRC team, fostering capability development and high performance.
• Drive automation and tooling improvements to increase GRC workflow scalability.
• Collaborate with other security disciplines to ensure coordinated risk management.

Required profile

• 10+ years of experience in information security, with at least 5 years in a senior leadership role.
• Proven track record of building and leading teams in complex, international, multi‑stakeholder environments.
• Experience reporting security risk to executive leadership and governance structures.
• Demonstrated ability to drive automation and improve GRC processes.

Required skills

What we offer

• Competitive salary package with an attractive bonus incentive plan.
• Above‑norm paid vacation and comprehensive health, insurance and wellbeing benefits.
• Retirement investment plan contributions and various memberships and perks.