Director, Governance, Risk, and Compliance

Who We Are:

SiriusXM and its brands (Pandora, SiriusXM Media, AdsWizz, Simplecast, and SiriusXM Connect are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners -- in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM's vision to life every day.

How you'll make an impact:

The Director of GRC will lead the organization's governance, risk management, and compliance programs, ensuring that the business operates securely, ethically, and in alignment with key regulatory requirements. This role acts as the bridge between executive leadership, legal, security, and operations teams, protecting the company's ability to conduct business by maintaining critical compliance certifications, mitigating risks, and driving a culture of accountability.

What you'll do:

• Establish, maintain, and communicate enterprise security and compliance policies, standards, and procedures.
• Ensure consistent governance practices across business units and technology functions.
• Own the enterprise risk management (ERM) framework, including risk identification, assessment, and mitigation strategies.
• Deliver clear reporting to executives and the board on organizational risk posture.
• Maintain compliance with regulatory frameworks and certifications (SOX, SOC 2, ISO 27001, and PCI-DSS).
• Partner with internal teams and external auditors to manage audits, certifications, and regulatory examinations.
• Ensure vendor and third-party risk management programs are effective and scalable.
• Partner with the CISO, CIO, and General Counsel to embed compliance and risk considerations into business strategy.
• Support secure product development and go-to-market efforts through compliance-by-design approaches.
• Mentor and develop GRC staff, fostering a culture of accountability and continuous improvement.
• Champion cross-functional collaboration to integrate risk and compliance practices across the enterprise.
• Own and evolve the business continuity and disaster recovery planning programs.
• Ensure the organization is prepared to respond to incidents and regulatory inquiries with confidence and clarity.

What You'll Bring:

• 10+ years of experience in governance, risk, compliance, or information security, with at least 5 years in a leadership role.
• Bachelor's degree in Information Security, Risk Management, Business, or related field.
• Deep knowledge of regulatory frameworks and industry standards (SOC 2, ISO 27001, SOX, and PCI-DSS).
• Proven experience leading enterprise risk management programs and driving successful compliance audits.
• Strong understanding of information security principles and their application to business operations.
• Demonstrated ability to partner with senior executives, boards, and cross-functional teams to influence strategy.
• Exceptional communication skills, with the ability to translate complex risk and compliance concepts into clear business terms.
• Experience building and scaling GRC teams in complex, multi-technology environments.

At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience. These considerations can cause your compensation to vary. We expect the base salary for this position to be in the range of $182,000 to $245,000 and will depend on your skills, qualifications, and experience. Additionally, this role might be eligible for discretionary short-term and long-term incentives. We encourage all interested candidates to apply.

Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation. SiriusXM is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.

The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice.