We are seeking a seasoned Vice President of Cyber Governance, Risk & Compliance to lead the strategy, execution, and continuous maturation of our cybersecurity governance, risk, and compliance program. Reporting to the Chief Information Security Officer, this leader will oversee the frameworks, processes, and teams responsible for cyber risk governance, regulatory readiness, policy management, control assurance, and third-party cyber risk oversight.

This executive will serve as a key strategic partner to the CISO and senior leadership team, translating complex cyber and technology risks into actionable business insights while ensuring the organization maintains a strong control environment appropriate for a highly regulated financial services institution.

The ideal candidate brings extensive experience building and scaling cyber GRC programs within complex, regulated environments and has demonstrated success leading teams through program transformation and maturity uplift.

Role Responsibilities:

Lead the cyber GRC function and define strategic roadmap, operating model, and maturity targets.
Maintain governance structures supporting cyber risk decision-making, escalation, and executive oversight.
Drive cyber risk appetite, exception management, and risk acceptance processes.
Oversee cyber and technology risk assessment methodologies and execution.
Develop and maintain executive and Board-level cyber risk reporting and metrics.
Lead preparation and coordination for regulatory exams, internal/external audits, and customer assessments related to cybersecurity.
Oversee control framework management, evidence programs, and issue remediation governance.
Own lifecycle management of security policies, standards, and governance documentation.
Oversee cyber due diligence and ongoing risk monitoring for third-party vendors, partners, and strategic providers.
Build, mentor, and scale a high-performing GRC team.

Role Requirements:

Bachelor’s degree required; advanced degree preferred.
15+ years of experience in cybersecurity, technology risk, audit, compliance, or governance roles.
7+ years of people leadership experience with increasing organizational scope.
Proven experience building, transforming, or materially uplifting cyber GRC programs in financial services or similarly regulated industries.
Deep knowledge of cybersecurity governance, financial services regulatory expectations, security/control frameworks, audit/regulatory exams, and third-party cyber risk programs.
Possesses at least one of the following professional credentials (or other industry-related credential): CISSP, CRISC, CISM or CISA

What Success Looks Like:

Assess and baseline current cyber GRC maturity.
Deliver a prioritized GRC uplift roadmap.
Improve executive and Board cyber risk transparency.
Strengthen regulatory and audit readiness.
Mature policy, exception, and issue management processes.
Enhance first-line ownership of cyber and technology risk.

Work Shift

HYBRID

BENEFITS AND OTHER DETAILS

Benefits

You will also have access to short-term incentives, multiple health insurance options, accident and life
insurance, and access to best-in-class development platforms, to name a few. Please see the benefits below specific to your country. If applicable, additional role-specific benefits will be mentioned during your interview process or in an offer of employment.

Your United States specific benefits include:

Parental Leave
Family First Programs
Medical, Dental, and Life Insurance
Tuition Repayment Assistance Program

For residents of Colorado, California, Connecticut, Delaware, Minnesota, and Pennsylvania: Please do not respond to any questions on this initial application that may seek age-identifying information such as age, date of birth, or dates of school attendance or graduation. You may also redact this information from any materials you submit during the application process. You will not be penalized for redacting or removing this information.

Salary

The base salary range is $240,000 - $260,000 USD per year, total on target compensation includes a base salary plus a variable target incentive that aligns with individual and company performance.

Other Details

As part of the application process, all applicants are required to take assessments. Western Union has partnered with a 3rd party provider to administer these tests. Applicants will need to provide their name and email address in order to process the assessments. If you have any questions, you may reach out to careers@westernunion.com.

We are passionate about honoring our employee's identity and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting the communities we serve. We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.

#LI-AM3

#LI-Hybrid

Estimated Job Posting End Date:

07-10-2026

This application window is a good-faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.