Tech Risk & Compliance Director [Interim]

Job description

Director, Tech Risk & Compliance Contract | Hybrid (Europe, with travel as required) | 6 months with possible extension Our client is a major European FMCG group who are modernizing their technology organization, they are scaling AI-native capabilities and converging IT capabilities across European markets. As the transformation accelerates, compliance demands on the central technology function are multiplying across security, data protection, operational resilience, AI regulation, and audit readiness. You will step in as the accountable senior leader who filters these demands and builds a coherent, prioritised agenda. Reporting directly to the European CTO, you will set the future-state vision for Tech risk and compliance, drive the transformation roadmap, and hand over a functioning Risk and Compliance operating model to a permanent successor. Key Responsibilities Act as the single point of coherence for all compliance demands on the technology function - translating fragmented asks into a prioritised agenda Design and run non-cyber risk and compliance governance: risk appetite, control frameworks, reporting cadence, and escalation Define the future-state vision and lead business planning for IT risk and compliance: multi-year roadmap, investment cases, and measurable outcomes Partner with convergence leadership to design risk and compliance into the target operating model Own the non-cyber technology risk portfolio at scale: infrastructure, platform, application, and data risk Drive operational resilience in line with DORA-equivalent expectations - critical service identification, impact tolerances, scenario testing, and incident readiness Stand up the third-party risk framework covering critical vendors, cloud providers, and AI suppliers Own the Tech organization’s posture on GDPR, the EU AI Act, and adjacent regulatory frameworks Act as the primary interface for internal audit and cyber security teams Who You Are Director-level leader with deep experience in technology risk, compliance, operational resilience, or audit within a regulated industry, large multinational, or top-tier consulting firm Proven track record turning fragmented compliance demands into a single coherent agenda Experience setting strategy and shaping vision for a risk and compliance function - not only running day-to-day Strong working knowledge of DORA-equivalent resilience expect…