Senior Governance Lead

Position Overview

Hearst Technology's Governance, Risk & Compliance (GRC) organization is seeking a Senior Governance Lead to drive enterprise IT governance strategy, policy architecture, and IT governance program maturity across Hearst's diverse portfolio of businesses.

This role is responsible for shaping how cybersecurity and technology governance practices are defined, implemented, and adopted across Hearst companies.

The ideal candidate is a strategic governance leader who can design scalable governance frameworks, harmonize policies across organizations, and build trusted relationships with technology and security leaders across the enterprise.

Because Hearst operates in a federated environment, success in this role requires strong collaboration skills and the ability to influence governance adoption across multiple independent businesses.

Hearst is also accelerating the use of AI-driven technologies to drive productivity and customer-focused innovation.

Experience or familiarity with AI governance or emerging technology risk is a strong advantage.

What You'll Do


* Design and evolve the enterprise IT and cybersecurity governance framework for Hearst Technology.


* Establish and mature governance operating models, working groups, and decision forums.


* Align governance practices with industry frameworks such as NIST, ISO 27001, and COBIT to support regulatory and assurance requirements, including PCI, HIPAA, SOX, and SOC 2.


* Own the enterprise information security policy architecture and lifecycle, including harmonization across Hearst companies and management of reviews, approvals, exceptions, and communications.


* Partner with CISOs, CIOs, security leaders, and business stakeholders across Hearst companies to enable adoption of enterprise governance practices.


* Facilitate governance discussions and decision-making across enterprise and business leadership forums.


* Partner with the cybersecurity data engineering function to define governance KPIs, reporting frameworks, and executive reporting on governance maturity and risk visibility.


* Support governance for AI, automation, and emerging technologies by establishing guardrails that enable innovation while managing risk.


* Identify opportunities to improve governance scalability through analytics, automation, and AI.

What We're Looking For

Required


* Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or a related discipline required.

Equivalent experience may be considered in lieu of formal education.


* 8+ years of experience in IT governance, cybersecurity governance, or GRC


* Experience developing governance frameworks, policies, or enterprise standards


* Experience working in large enterprise or multi-business organizations


* Strong stakeholder management and executive communication skills


* Experience with governance frameworks su...