Opportunity at
MotiveDirector, Security Compliance and Trust
Motive is hiring a Director, Security Compliance and Trust to head the group that keeps customers, regulators and partners confident in the company. The director reports…
Career Tools
About This Role
Motive is hiring a Director, Security Compliance and Trust to head the group that keeps customers, regulators and partners confident in the company. The director reports to the CISO. Scope includes governance and risk, compliance, audit and certification work, privacy, customer assurance, policy, awareness training and AI oversight. Working relationships extend to Sales, Customer Success, Finance, IT, Product, Engineering and Legal. The program covers ISO 27001 and 27701, both SOC…
Job Description
Motive is hiring a Director, Security Compliance and Trust to head the group that keeps customers, regulators and partners confident in the company. The director reports to the CISO. Scope includes governance and risk, compliance, audit and certification work, privacy, customer assurance, policy, awareness training and AI oversight. Working relationships extend to Sales, Customer Success, Finance, IT, Product, Engineering and Legal.
The program covers ISO 27001 and 27701, both SOC reports, PCI DSS, and a route toward FedRAMP. The director plans a single control framework that maps across many standards, including GDPR and CCPA/CPRA, so proof is gathered one time. The role runs the audit calendar, manages auditors and assessors directly, and oversees privacy operations including data subject requests, impact assessments and cross-border transfers.
Global growth is central. Motive is growing into Mexico, South America, Canada and the EU, and the director prepares compliance for each market before sales arrives, coordinating with Engineering and Platform teams on where data lives and regional system design. The director also owns the trust portal, security questionnaires and senior escalations in enterprise deals, and builds an AI governance program covering product and internal AI use.
Expect a leadership post where you still do hands-on work from day one, building the function with automation in mind. Applicants should bring eight-plus years across compliance, GRC, privacy, audit and risk, five of them leading both managers and senior individual contributors. They must have personally written policies, designed controls, sat through audit fieldwork and answered hard customer questions, and must show concrete AI-driven results in compliance work.
Required privacy experience covers GDPR and CCPA/CPRA operations. Multi-framework program ownership in a cloud SaaS setting is expected, and leading distributed teams across time zones is needed. The posted pay range is 225,000 to 305,000 USD. Listed benefits include medical coverage with pharmacy, optical and dental, paid time off, disability and life insurance, a 401(k), and possible restricted stock units.
Responsibilities
- Run the group covering compliance, privacy and trust: org design, hiring and team development
- Create a unified control framework that spans GDPR, CCPA/CPRA, ISO, SOC, PCI DSS and FedRAMP
- Run the annual audit calendar and lead the path to FedRAMP
- Manage privacy operations such as data subject requests, impact assessments and transfers
- Prepare compliance for new markets alongside Engineering and Platform
- Serve as the senior escalation point for customer security reviews and enterprise deals
- Automate evidence collection, control monitoring and questionnaire responses
- Maintain the security policy library, training and AI governance program
Requirements
- Eight-plus years across compliance, GRC, privacy, audit and risk, five of them in leadership
- Hands-on record of writing policies, designing controls and handling audit fieldwork
- Proven ownership of ISO 27001, SOC 1, SOC 2 and PCI DSS programs
- Operational privacy experience under GDPR and CCPA/CPRA
- Demonstrable AI-driven work in running compliance programs, with measurable outcomes
- Experience leading globally distributed teams
Qualifications
- A privacy certification such as CIPM, CIPP/US or CIPP/E
- Experience setting up compliance in Mexico, Latin America, Canada or the EU
- Working knowledge of PIPEDA, Law 25, LGPD and LFPDPPP
- FedRAMP authorization or readiness experience
- IPO readiness, SOX or regulated-environment experience
- Knowledge of ISO/IEC 42001, NIST's AI RMF and the EU AI Act
Core Skills
Benefits
- Health, pharmacy, optical and dental benefits
- Paid time off and sick time
- Short and long term disability coverage and life insurance
- 401(k) contribution
- Possible restricted stock units
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
To whom does the director report?
The director reports to the Chief Information Security Officer, according to the posting.
What salary is listed?
The posting lists 225,000 to 305,000 USD for the United States.
What experience is required?
Eight-plus years in compliance, GRC, privacy, audit and risk management work is the bar, five of them leading teams.
Are privacy certifications required?
A certification such as CIPM, CIPP/US or CIPP/E is treated as a plus rather than a requirement.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
