Director, Governance Risk and Compliance

Wilson Sonsini is the premier legal advisor to technology, life sciences, and other growth enterprises worldwide. We represent companies at every stage of development, from entrepreneurial start-ups to multibillion-dollar global corporations, as well as the venture firms, private equity firms, and investment banks that finance and advise them. The firm has approximately 1,100 attorneys in 17 offices: 13 in the U.S., two in China, and two in Europe. Our broad spectrum of practices and entrepreneurial spirit allow exceptional opportunities for professional achievement and career growth.

As the Director of Governance, Risk & Compliance you’re not just overseeing policies and procedures — you’re also safeguarding the firm’s reputation, enabling its strategic growth, and ensuring it operates with confidence in a rapidly evolving regulatory world. This is a high-visibility, cross-functional leadership role where you will collaborate closely with lawyers, IT security, Human Resources, General Counsel and client teams, acting as a strategic advisor and business enabler.

Under the guidance of the Senior Director of Information Security and Risk Management, you will lead Wilson Sonsini’s information governance, risk management and compliance programs and evaluate and enhance these programs into a more robust function that drives the business forward. The position also provides leadership and oversight for all risk management and compliance teams to ensure the programs are meeting business needs.

This position is available as a hybrid or fully remote work schedule.
 

Responsibilities:

• Evaluate the current status of the firm’s information governance, risk and compliance functions; develop and direct the implementation a firmwide governance framework.
• Provide direction and oversight of all firmwide data governance and technology related risk and compliance activities .
• Serve as a strategic consultant for information governance, risk, and compliance related issues for senior leadership and work closely with practice groups, firm management, and other administrative departments throughout the organization to meet client and regulatory requirements, as well as support the strategic goals of the firm.
• Collect status on remediation efforts from IT departments and create reports as needed.
• Create and enhance Corrective Action Plans for remediation efforts.
• Establish an IT business continuity and disaster recovery plan for the firm; collaborate with other IT groups and departments to document and ensure there is a comprehensive approach for disruptive events.
• Lead efforts associated with risk evaluations of the firm’s environment by external third parties.
• Provide direction, training, and mentoring to assigned managers and staff by addressing performance concerns, conducting performance evaluations, and overseeing resources and program budgets.  
• Lead program-wide meetings, establish team goals, identify ways to maximize team capabilities, and align team efforts to accomplish broader business objectives.  
• Develop firm-wide policies as it relates to the Information Governance, Risk and Compliance programs and ensure the successful execution of these policies.
• Maintain measures and metrics of risk related to the security and IT hygiene of the WSGR environment.
• Develop and manage the firm’s security and privacy training and awareness program.

Education and/or Work Experience Requirements:

•  Bachelor’s degree preferred.
• Minimum eight years of experience in a risk management function, including six years in a leadership role.
• Knowledge and experience with risk management and compliance reporting.
• Knowledge of GRC applications, and experience developing metrics.
• Experience with ServiceNow preferred.
• Excellent verbal and written communication skills, including ability to effectively communicate with internal and external clients.
• Must be able to work under pressure and meet deadlines, while maintaining a positive attitude and providing exemplary customer service.
• Ability to work independently and to carry out assignments to completion within parameters of instructions given, prescribed routines, and standard accepted practices.
   

The primary location for this job posting is in Washington, D.C., but other locations may be listed. The actual base pay offered will depend upon a variety of factors, including but not limited to the selected candidate’s qualifications, years of relevant experience, level of education, professional certifications and licenses, and work location. The anticipated pay range for this position is as follows:

Washington, D.C., Austin, Boston, Boulder, Century City, Delaware, Los Angeles, Salt Lake City, San Diego, Seattle: $267,750 – $362,250 per year.

The compensation for this position may include a discretionary year-end merit bonus based on performance. We offer a highly competitive salary and benefits package.

Benefits information can be found here. Equal Opportunity Employer (EOE).