P

Prologis

Owns, manages, develops logistics real estate

Director, IT Governance, Risk and Compliance

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeDenver, CO, USAIn-person

About the Job

Requirements

  • At least 10 years of relevant experience in IT governance, risk, compliance, IT audit, or related disciplines.
  • At least 3 years of people-management experience.
  • Demonstrated experience leading enterprise governance, risk, and compliance (GRC) programs.
  • Experience with the NIST Cybersecurity Framework (CSF) 2.0 and the Three Lines Model.
  • Experience with Sarbanes-Oxley (SOX), IT general controls (ITGC), and technology-related regulatory requirements in a global environment.
  • Experience applying artificial intelligence, workflow automation, and system integrations to streamline GRC processes, improve reporting, strengthen control monitoring, or increase operational efficiency.
  • Ability to influence executives and collaborate across technology, Internal Audit, Legal, Human Resources, Risk, Finance, and other global business functions.
  • Ability to exercise sound judgment and discretion when handling sensitive matters.

Responsibilities

  • Lead the global IT GRC program and establish strategy and priorities across governance, technology risk, compliance, and assurance.
  • Lead IT risk and controls oversight within the Three Lines Model, including risk assessments, control requirements, risk acceptance and exceptions, control monitoring, remediation oversight, and leadership reporting aligned with the NIST Cybersecurity Framework (CSF) 2.0 and applicable regulatory and audit requirements.
  • Oversee global technology compliance and assurance activities, including SOX, IT general controls (ITGC), GDPR, DORA, HIPAA, SWIFT, India's Information Technology Act, and disaster recovery governance and testing oversight.
  • Govern third-party and cyber supply chain risk, data protection and information risk, investigations, eDiscovery, and technology and cybersecurity support for investor Operational Due Diligence (ODD) assessments and requests.
  • Monitor emerging technology risks and evolving regulatory requirements, assess their impact on Prologis, translate applicable changes into GRC and control requirements, and advise leadership on implications.
  • Modernize and scale GRC processes by applying AI, workflow automation, and system integrations to improve efficiency, reporting, control monitoring, and control effectiveness.
  • Lead and develop the GRC team, manage GRC technology and vendors, and oversee security awareness and IT policy governance, including training campaign planning, communications coordination, and IT policy and procedure governance.

Desired Qualifications

  • Bachelor's degree or equivalent relevant experience.
  • Relevant GRC, audit, risk, or cybersecurity certification.
  • Ability to learn quickly and adapt to evolving regulatory and technology requirements in a global environment.
  • Willingness and capability to leverage emerging technology, automation, and AI tools to improve efficiency, quality, and speed, while exercising sound judgment, creative thinking, and accountability for outcomes.

About the Company

Prologis

Owns, manages, develops logistics real estate

Prologis owns, manages, and develops industrial logistics properties worldwide as a REIT. It earns revenue by leasing modern logistics facilities to about 6,700 customers located near major transportation hubs and metropolitan areas to support global trade and e-commerce. The company differentiates itself with a large, strategically located portfolio and an integrated platform for ownership, development, and property management. Its goal is to provide essential logistics infrastructure that enables efficient supply chains while growing rental income and property value over time.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
1983

Recently Posted Jobs

Explore more opportunities at Prologis

See more jobs