Sr. Director, Governance, Risk, and Compliance (GRC)

Nordstrom is hiring a Senior Director to build and mature an enterprise-wide Governance, Risk, and Compliance (GRC) function. The leader will partner with the CISO and executives across the company to translate cybersecurity and regulatory risk into clear insights, oversee audit readiness, and drive executive/Board reporting.

• Partner with the Chief Information Security Officer (CISO) to shape and execute the enterprise GRC strategy
• Lead governance, risk, and compliance programs with regulatory rigor
• Translate cybersecurity, regulatory, and enterprise risks into actionable executive insights
• Oversee internal and external audit activities and ensure timely remediation
• Drive executive and Boardlevel risk reporting through dashboards, metrics, and storytelling

This is a GRC-focused leadership role centered on governance, risk, and compliance for cybersecurity, IT, third-party, and operational domains. The scope includes enterprise risk assessments, audit oversight and remediation, and evaluation of GRC tools and platforms to enable automation and scalable risk/compliance management.

The ideal candidate is an executive-level GRC leader with 10+ years of progressive experience across governance, risk, compliance, information security, or enterprise risk management. They have partnered closely with a CISO to build and mature an enterprise-wide GRC function, translate complex cybersecurity and regulatory risks into executive-ready insights, and drive continuous audit readiness and remediation.