Director, Security Governance, Risk & Compliance
Papa Johns · Louisville, Kentucky, US
What’s Unique About You Is What Makes Us Better! Diversity is our strength and competitive advantage. Bring your flavor to the Papa John's team today!
Job description
What’s Unique About You Is What Makes Us Better! Diversity is our strength and competitive advantage. Bring your flavor to the Papa John's team today! Position Summary: Papa Johns is seeking a highly experienced and strategic Director of Security, Risk & Compliance to manage our global cyber security risk efforts. Reporting directly to the CISO, this role owns the frameworks, processes, and controls that ensure the organization meets its obligations to payment card brands, regulators, customers, and franchise partners — while enabling the business to operate efficiently and grow confidently. The Director serves as the primary liaison to external auditors, Qualified Security Assessors (QSAs), legal counsel, privacy, and regulators. Internally, this role is the connective tissue between the security program and the rest of the business — translating technical risks into business language, driving accountability for control ownership across IT, Development and Operations, and ensuring the CISO has the compliance posture and metrics data needed for Board reporting. In a franchised QSR environment, this role carries a unique complexity: compliance obligations extend beyond corporate wal...