Director, IT Governance, Risk and Compliance

At Prologis, we don’t just lead the industry—we define it with a 1.3 billion square foot portfolio and an annual throughput of approximately $3.2 trillion. We create the intelligent infrastructure that powers global commerce, seamlessly connecting the digital and physical worlds. From agile supply chains to energy solutions, our ecosystems help your business move faster, operate smarter and grow sustainably. With unmatched scale, innovation and expertise, Prologis is a category of one—not just shaping the future of logistics but building what comes next. Job Title: Director, IT Governance, Risk and Compliance Company: Prologis A day in the life The Director, IT Governance, Risk, and Compliance (GRC) leads Prologis’ global IT GRC program and team, reporting to the CISO. This role establishes governance, risk, and compliance priorities across the countries where Prologis operates and partners with global business and technology teams to strengthen technology risk and control oversight. The Director works closely with Security, Infrastructure, Internal Audit, Legal, HR, Risk, Finance, and business leadership to address regulatory, audit, third-party, and information risk requirements. The role also modernizes and scales GRC processes through AI, automation, workflow improvements, and system integrations to improve efficiency, reporting, and control effectiveness. Key responsibilities include: Lead the global IT GRC program and establish strategy and priorities across governance, technology risk, compliance, and assurance. Lead IT risk and controls oversight within the Three Lines Model, including risk assessments, control requirements, risk acceptance and exceptions, control monitoring, remediation oversight, and leadership reporting aligned with the NIST Cybersecurity Framework (CSF) 2.0 and applicable regulatory and audit requirements. Oversee global technology compliance and assurance activities, including SOX, IT general controls (ITGC), GDPR, DORA, HIPAA, SWIFT, India’s Information Technology Act, and disaster recovery governance and testing oversight Govern third-party and cyber supply chain risk, data protection and information risk, investigations, eDiscovery, and technology and cybersecurity support for investor Operational Due Diligence (ODD) assessments and requests. Monitor emerging technology risks and evolving regulatory requirements, assess their impact on Prologis, translate applicable changes into GRC and control requirements, and advise leadership on implications. Modernize and scale GRC processes by applying AI, workflow automation, and system integrations to improve efficiency, reporting, control monitoring, and control effectiveness. Lead and develop the GRC team, manage GRC technology and vendors, and oversee security awareness and IT policy governance, including training campaign planning, communications coordination, and IT policy and procedure governance.   Building blocks for success Required: 10+…