Address
Form of workWho We Are:
SiriusXM and its brands (Pandora, SXM Media, AdsWizz, Simplecast, and SiriusXM Connected Vehicle Services) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners -- in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.
This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM's vision to life every day.
SiriusXM is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. SiriusXM's platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. SiriusXM's subsidiaries Simplecast and AdsWizz make it a leader in podcast hosting, production, distribution, analytics and monetization. The Company's advertising sales organization, which operates as SXM Media, leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. SiriusXM, through Sirius XM Canada Holdings, Inc., also offers satellite radio and audio entertainment in Canada. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers.
How you'll make an impact:
As a Director of Governance, Risk, and Compliance's primary role will be to establish best in class Compliance and Risk programs and policies that will safeguard the company and its partners, and manage the GRC team at SiriusXM. This role will work hand in hand with the office of the CISO and the Comptroller to assure compliance across a variety of certifications and efforts.
What you'll do:
Develop, enhance, and operationalize enterprise-level risk and Compliance policies, processes and controls to mitigate risk and comply with applicable laws and regulations.
Performing activities to monitor and assess the governance, risk and Compliance controls on an ongoing basis. Work closely with the operational departments (Legal, Engineering, Marketing, Support, Operations, ...) to develop, monitor policies and standards in compliance with applicable privacy policy & regulations.
Collaborate with key stakeholders to review projects, business critical systems and related data to ensure compliance with regulatory laws, and if necessary, perform and advise on risk impact assessments.
Complete ownership and responsibility to answer questionnaires and client required information. Coordinate, conduct and act as primary contact for all internal and external audits (security & compliance).
Lead the development and ongoing management of a risk program across the company across all locations / jurisdictions.
Identify, track, monitor and report on SOX IT General Controls and other compliance requirements. Provide recommendations to stakeholders when appropriate.
Responsible for the regulatory training of all employees and contractors.
What you'll need:
As a compliance-minded leader that has a strong sense of integrity and the ability to balance business interests with the need for compliance standards.
Bachelor's degree in the IT/Technology or legal field.
8+ years of experience in a Compliance position.
Expertise in compliance standards, eg. SOX, ISO 27001, SOC1/2, SSAE 16, NIST CSF and PCI DSS.
Strong understanding and experience in enabling GRC solutions and common control framework for data regulations.
Excellent management and process improvement skills.
Ability to work independently in a fast-paced environment and handle multiple complex & confidential tasks.
Excellent communication, interpersonal skills and attention to details & deadlines.
Must have legal right to work in the U.S.
At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience. These considerations can cause your compensation to vary. We expect the base salary for this position to be in the range of $154,600 to $225,500 and will depend on your skills, qualifications, and experience. Additionally, this role might be eligible for discretionary short-term and long-term incentives. We encourage all interested candidates to apply.
Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation. SiriusXM is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.
The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice.
Employment Type: FULL_TIME
