Director, Compliance (Cyber & Technology Regulatory Compliance)

What You'll Do At Principal, we're building a dedicated cyber and technology regulatory compliance capability within Enterprise Compliance. This role will play a critical part in establishing and evolving the framework, processes, and oversight activities needed to support a complex and rapidly changing cyber regulatory environment. As a Director, Compliance, you'll serve as a trusted advisor and subject matter expert on cybersecurity, data protection, and other technology-related regulations. You'll partner closely with technology and information security teams, Enterprise Risk, Legal, and business leaders to help strengthen compliance practices while providing independent oversight and credible challenge. This is a unique opportunity to help shape a program while supporting global technology and cybersecurity initiatives. What You'll Do Lead regulatory change management efforts related to cybersecurity, data protection, and other technology-related regulations. Monitor emerging regulatory requirements and industry developments, translating complex regulations into actionable business guidance. Coordinate responses to regulatory examinations, inquiries, and assessments involving technology and cybersecurity regulations. Develop and enhance compliance frameworks, processes, and controls supporting cyber and technology compliance obligations. Build and oversee compliance testing and monitoring activities in partnership with enterprise testing teams. Provide regulatory compliance guidance to technology, cybersecurity, and business stakeholders. Research and interpret global cybersecurity and technology regulations and communicate impacts to leadership. Support incident management, business continuity, and resilience activities from a regulatory compliance and oversight perspective. Develop reporting and compliance communications for senior leaders and stakeholders. Foster a culture of compliance through effective consultation, education, and partnership across the enterprise. Who You Are 10+ years of experience in compliance, risk management, legal, regulatory, cybersecurity governance, technology risk, or related disciplines. Experience building, enhancing, or managing compliance programs. Knowledge of cybersecurity, information security, technology risk, data protection, or operational resilience regulations. Strong understanding of regulatory change management, compliance oversight, monitoring, and testing practices. Experience partnering with senior leaders and influencing outcomes without direct authority. Exceptional analytical, communication, and relationship-building skills. Ability to translate complex regulatory requirements into practical business solutions. Demonstrated curiosity, initiative, and a strategic mindset when solving complex compliance challenges. Preferred Qualifications Experience supporting financial services organizations. Experience with cybersecurity regulatory frameworks and requirements, including New York DFS Cybersecurity Regulation (23 NYCRR 500), DORA, and other cybersecurity, data protection, and other technology-related regulations. Experience supporting regulatory examinations and remediation efforts. Experience developing compliance testing and monitoring programs. Familiarity with cyber governance, risk, and compliance (GRC) programs. Travel This role will have limited overnight travel. Salary Range Information Salary ranges below reflect targeted base salaries. Non-sales positions have the opportunity to participate in a bonus program. Sales positions are eligible for sales incentives, and in some instances a bonus plan, whereby total compensation may far exceed base salary depending on individual performance. Actual compensation for all roles will be based upon geographic location, work experience, education, licensure requirements and/or skill level and will be finalized at the time of offer. Salary Range (Non-Exempt expressed as hourly; Exempt expressed as yearly) $141000 - $175000 / year Time Off Program Flexible Time Off (FTO) is provided to salaried (exempt) employees and provides the opportunity to take time away from the office with pay for vacation, personal or short-term illness. Employees don’t accrue a bank of time off under FTO and there is no set number of days provided. Pension Eligible Yes Work Authorization/Sponsorship At this time, we're not considering applicants that need any type of immigration sponsorship (additional work authorization or permanent work authorization) now or in the future to work in the United States. This includes, but IS NOT LIMITED TO: F1-OPT, F1-CPT, H-1B, TN, L-1, J-1, etc. For additional information around work authorization needs please use the following links. Nonimmigrant Workers and Green Card for Employment-Based Immigrants Investment Code of Ethics For Principal Asset Management positions, you’ll need to follow an Investment Code of Ethics related to personal and business conduct as well as personal trading activities for you and members of your household. These same requirements may also apply to other positions across the organization. Experience Principal At Principal, we value connecting on both a personal and professional level. Together, we’re imagining a more purpose-led future for financial services – and that starts with you. Our success depends on the unique experiences, backgrounds, and talents of our employees. And we support our employees the same way we support our customers: with comprehensive, competitive benefit offerings crafted to protect their physical, financial, and social well-being. Check out our careers site to learn more about our purpose, values and benefits. Principal is an Equal Opportunity Employer All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. Posting Window We will accept applications for 3 full days following the Original Posting Date, after which the posting may remain open or be removed based upon applications received. If we choose to post the job again, we will accept additional applications for at least 1 full day following the Most Recently Posted Date. Please submit applications in a timely manner as there is no guarantee the posting will be available beyond the applicable deadline. Original Posting Date 10/13/2026 Most Recently Posted Date 10/13/2026 Principal uses artificial intelligence tools to assist in reviewing and evaluating job applications, fraud prevention, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Workforce (U.S.) Privacy Notice for more details on our practices and your data privacy rights. LinkedIn Remote Hashtag #LI-RemoteAt Principal, we're building a dedicated cyber and technology regulatory compliance capability within Enterprise Compliance. This role will play a critical part in establishing and evolving the framework, processes, and oversight activities needed to support a complex and rapidly changing cyber regulatory environment. As a Director, Compliance, you'll serve as a trusted advisor and subject matter expert on cybersecurity, data protection, and other technology-related regulations. You'll partner closely with technology and information security teams, Enterprise Risk, Legal, and business leaders to help strengthen compliance practices while providing independent oversight and credible challenge. This is a unique opportunity to help shape a program while supporting global technology and cybersecurity initiatives. What You'll Do Lead regulatory change management efforts related to cybersecurity, data protection, and other technology-related regulations. Monitor emerging regulatory requirements and industry developments, translating complex regulations into actionable business guidance. Coordinate responses to regulatory examinations, inquiries, and assessments involving technology and cybersecurity regulations. Develop and enhance compliance frameworks, processes, and controls supporting cyber and technology compliance obligations. Build and oversee compliance testing and monitoring activities in partnership with enterprise testing teams. Provide regulatory compliance guidance to technology, cybersecurity, and business stakeholders. Research and interpret global cybersecurity and technology regulations and communicate impacts to leadership. Support incident management, business continuity, and resilience activities from a regulatory compliance and oversight perspective. Develop reporting and compliance communications for senior leaders and stakeholders. Foster a culture of compliance through effective consultation, education, and partnership across the enterprise.10+ years of experience in compliance, risk management, legal, regulatory, cybersecurity governance, technology risk, or related disciplines. Experience building, enhancing, or managing compliance programs. Knowledge of cybersecurity, information security, technology risk, data protection, or operational resilience regulations. Strong understanding of regulatory change management, compliance oversight, monitoring, and testing practices. Experience partnering with senior leaders and influencing outcomes without direct authority. Exceptional analytical, communication, and relationship-building skills. Ability to translate complex regulatory requirements into practical business solutions. Demonstrated curiosity, initiative, and a strategic mindset when solving complex compliance challenges. Preferred Qualifications Experience supporting financial services organizations. Experience with cybersecurity regulatory frameworks and requirements, including New York DFS Cybersecurity Regulation (23 NYCRR 500), DORA, and other cybersecurity, data protection, and other technology-related regulations. Experience supporting regulatory examinations and remediation efforts. Experience developing compliance testing and monitoring programs. Familiarity with cyber governance, risk, and compliance (GRC) programs. Travel This role will have limited overnight travel.