Director of Cybersecurity Compliance

About the role

The Director of Cybersecurity Compliance leads the enterprise-wide compliance program for Advance Auto Parts’ India Innovation Center, ensuring that all security controls meet regulatory, contractual and internal requirements. This senior position partners with Information Security, IT, Legal, Privacy, Risk, Audit and business leaders to embed compliance across technology and operations.

Key responsibilities

• Define and maintain the cybersecurity compliance roadmap, governance model and reporting framework.
• Align controls with NIST CSF 2.0, NIST SP 800-53, SOC 2, PCI DSS, SOX ITGC, HIPAA/HITECH, GDPR, CCPA/CPRA and other applicable standards.
• Drive audit readiness, coordinate evidence collection, manage remediation plans and ensure timely closure of findings.
• Partner with control owners to embed compliance into security architecture, IAM, vulnerability management, cloud security and third‑party risk processes.
• Provide executive‑level visibility on compliance posture, control gaps, regulatory exposure and program maturity.

Required skills

• Knowledge of NIST CSF 2.0 and NIST SP 800‑53/800‑171 frameworks.
• Experience with SOC 2 Trust Services Criteria and PCI DSS compliance.
• Understanding of SOX IT General Controls, HIPAA/HITECH, GDPR and CCPA/CPRA requirements.