Vice President, Security Controls & Compliance

TransUnion s Job Applicant Privacy Notice Personal Information We Collect Your Privacy Choices Team Overview The Governance Compliance team is responsible for defining and executing TransUnion's global cybersecurity governance, compliance, audit, and control assurance strategy, ensuring alignment with business objectives, regulatory requirements, and the company's risk appetite. The team provides oversight of cybersecurity policies, regulatory compliance programs, audit management, control effectiveness, and enterprise cyber risk reporting while partnering across Technology, Product, Legal, Privacy, Risk, and Internal Audit functions. This role reports to the Senior Vice President, Governance, Risk Compliance and plays a key leadership role in advancing a modern, scalable, and data-driven cybersecurity governance program. #xa; #xa;This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week. Role Overview and Core Responsibilities Define and execute the enterprise cybersecurity governance and compliance strategy, including policies, standards, control frameworks, and operating processes that align with business priorities and risk appetite . Establish governance processes and metrics that give executive leadership, regulators, and the Audit Committee clear visibility into cyber risk, control effectiveness, compliance posture, audit results, and emerging risks . Oversee global cybersecurity compliance programs and readiness for regulatory examinations, external assessments, contractual obligations, and requirements including PCI DSS, SOX, NIST CSF, ISO 27001, privacy regulations, and customer security expectations . Serve as executive sponsor for cybersecurity audits, assessments, and examinations; partner with Internal Audit and business stakeholders to strengthen assurance and drive timely remediation of findings and control deficiencies . Lead enterprise cyber risk and control assessments, identify gaps, prioritize remediation, and establish accountability mechanisms that support risk reduction and issue closure . Translate technical security issues into business-focused risk discussions and ensure material cybersecurity risks are appropriately communicated and escalated . Modernize cyber governance, risk, and compliance capabilities through automation, modern GRC platforms, and AI-enabled processes that improve scale, consistency, and