Senior Director Governance, Risk & Compliance

Molex is seeking a Senior Director Governance, Risk & Compliance to define, implement, and continuously improve our enterprise governance, risk, and compliance strategy across a global industrial technology environment. This leader will continue to evolve the frameworks through which Molex identifies, quantifies, manages, monitors, and reports risk; meets regulatory, certification, and customer obligations; governs the responsible adoption of AI and emerging technologies; and provides executive leadership with clear, actionable risk intelligence.

The successful candidate will combine enterprise leadership, business acumen, and technical and regulatory depth to build a scalable global GRC operating model, strengthen accountability, and enable informed risk-based decisions across Molex.

The Molex Cybersecurity team plays a pivotal role in safeguarding the organization’s complex global enterprise, product and manufacturing ecosystem. In an environment governed by a myriad of regulatory requirements and industry standards, the team partners with global Digital and business teams to proactively develop and operate a robust cybersecurity program designed to fortify the company’s overall security posture.

Molex brings together innovation and technology to deliver electronic solutions to customers worldwide. With a presence in more than 40 countries, Molex offers a full suite of solutions and services for markets including data communications, consumer electronics, industrial, automotive, commercial vehicle, aerospace & defense and medical.

• Define and lead the global enterprise GRC strategy, roadmap, operating model, governance structure, and high-performing global organization.
• Partner with business, legal, Digital and Koch stakeholders to build an integrated governance architecture encompassing regulatory, certification, and customer requirements, including ISO 27001, TISAX, CMMC, GXP, data protection and export controls.
• Create horizon-scanning, impact-assessment, compliance-roadmap, evidence-management, and remediation capabilities that sustain compliance beyond point-in-time audits.
• Maintain an integrated enterprise risk register with accountable owners, measurable treatment plans, escalation thresholds, and analysis of systemic, correlated, and concentration risks.
• In collaboration with Koch, maintain an effective enterprise security policy and common control framework, rationalizing overlapping requirements and enabling a single-control, single-evidence approach where practical.
• In partnership with our Digital AI and legal teams define and operate an enterprise AI governance framework to ensure AI is developed, acquired, deployed, and operated responsibly, securely, and in alignment with business objectives.
• Lead enterprise security training and awareness, including role-based requirements and effectiveness measures.
• Define GRC data, metrics, analytics, KRIs, KPIs, control-effectiveness measures, dashboards, and executive reporting that connect investment to measurable risk reduction.
• Serve as executive owner for readiness across internal and external audits, certifications, customer assessments, and regulatory examinations; ensure findings are risk-ranked, remediated, validated, and closed.
• Advise business and functional leaders on complex risk decisions while balancing enterprise consistency with legitimate business-unit, customer, and geographic requirements.
• Build, develop, and retain a high-performing global team with clear roles, career paths, development programs, and succession plans.

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, business, or a related discipline.
• 12 or more years of progressive experience in governance, risk, compliance, cybersecurity, information security, IT risk, audit, or a closely related field.
• Experience leading enterprise GRC programs in a complex, regulated, global organization, and influencing cross-functional stakeholders without direct authority.
• Experience translating security, regulatory, certification, contractual, and customer requirements into practical and repeatable enterprise controls, and measurable compliance outcomes.
• Experience establishing and operating a cross-functional AI governance framework in a global organization.
• Working knowledge of ISO 27001, CMMC & GXP requirements.
• Experience establishing enterprise risk methodologies, integrated risk registers, quantitative or semi-quantitative risk measures, and executive-level reporting.
• Experience leading audits, assessments, certifications, findings remediation, and assurance programs.

• Experience in automotive, medical-device, optical networking, aerospace & defense, or another highly regulated industrial environment.
• Deep experience with implementing and operating a CMMC compliance framework in a globally distributed business.
• Hands on experience working with development, infrastructure, legal and business teams to design and operate a nimble, risk-adjusted AI governance framework in a global, regulated business.
• Relevant certifications such as CISSP, CISM, CRISC, CGEIT, CISA, ISO 27001 Lead Implementer or Lead Auditor, CMMC credentials, or AI governance, privacy, regulatory, or risk-management credentials.
• Ability to travel 10-20% domestically and internationally.