Director I, Security Compliance

Blue Yonder is a world leader in digital supply chain transformation. Retailers, manufacturers, and logistics providers across the globe rely on our AI-driven platform to plan, execute, and optimize the flow of goods from source to consumer. Our software touches the operations of some of the most recognizable brands in the world, which means the trust our customers place in the security, resilience, and integrity of our services is central to everything we do.

The Blue Yonder Governance, Risk, & Compliance team protects that trust. We build and operate the programs that keep Blue Yonder secure, compliant, and audit-ready across a broad portfolio of SaaS products and the cloud platforms that run them. This is a role for a leader who wants their work to be visible to customers, regulators, and executives alike — and who sees compliance not as a checkbox exercise, but as a durable business enabler.

The Director I, GRC leads the Compliance and Assurance team responsible for planning, executing, and maintaining Blue Yonder’s portfolio of information security and IT compliance certifications and attestations. Reporting to the Director II, GRC, you will own the end-to-end audit and compliance function — scoping, evidence, control operation, audit management, and reporting — across a multi-product, multi-cloud environment.

You will lead a team of compliance professionals delivering ISO 27001, ISO 27701, ISO 22301, ISO 42001, SOC 1, SOC 2, and Sarbanes-Oxley / IT General Controls (ITGC) audits, alongside other information security–based assessments across the Blue Yonder portfolio of services.  Additionally, you will identify and drive efforts to improve overall compliance health and maturing compliance operations through automation of previously manual activities.

• →Lead, develop, and mentor a team of compliance professionals responsible for delivering Blue Yonder’s information security certifications and attestations as well as supporting compliance operations.
• →Set direction and drive priorities to meet compliance needs for new products, contractual obligations, and changing security regulations.
• →Own the end-to-end compliance and audit lifecycle across products and internal systems.  This includes scoping, mapping controls, monitoring controls, audit coordination, evidence collection, issue remediation, management review, and final reporting.
• →Manage external auditors as the primary point of accountability — negotiating scope, timelines, and sampling, and driving clean, defensible outcomes.
• →Partner with Engineering, Product, Legal, Internal Audit, and other Security teams to maintain control operation and support recurring compliance activities.
• →Maintain cross-framework control library that allows for a control to satisfy multiple obligations as well as scale to accommodate technologies such as AI as well as changing regulations
• →Stand up and scale emerging frameworks including ISO 42001 for AI management systems, aligning Blue Yonder’s AI governance and responsible-AI practices with certification requirements.
• →Drive continuous compliance by championing automation, evidence pipelines, and GRC tooling that shift the program from periodic firefighting toward always-audit-ready operation.
• →Lead customer compliance assurance activities that include responding to customer security questionnaires, due diligence requests, and customer audits

Required Qualifications:

• Minimum 8 to 10+ years of progress experience in IT Security, Security Compliance or Audit within an enterprise SaaS environment.
• Minimum 1 year of experience leading teams (direct reports). 
• Hands-on experience designing and executing control testing programs and managing external audits in a multi-cloud environment.
• Experience supporting B2B customers through security questionnaires, due diligence requests, and audits.
• Strong written and verbal communication skills with ability to drive change and report on compliance at all levels of the organization.

Preferred Qualifications:

• Experience with ISO 42001 or AI governance frameworks.
• Experience developing and maintaining a cross-framework control library that maps to multiple security standards and regulations.
• Strong grounding in the NIST family of standards, including NIST SP 800-53 and the NIST Cybersecurity Framework, and experience mapping across frameworks.
• Relevant certifications such as CISA, CISM, CISSP, CIPP, ISO 27001 Lead Auditor / Lead Implementer, or equivalent.
• Experience in supply chain, logistics, or enterprise SaaS, and comfort operating in a fast-moving, AI-driven product organization.