Senior Director, Enterprise Control Framework

Bangalore · 12+ years experience · Hybrid · Posted Sep 30, 2026

At a glance

Ethos is seeking a Senior Director, Enterprise Control Framework to own the design, documentation, and ongoing health of the company's non-financial control framework.
This role will build and sustain the control architecture covering operational risk and compliance across the enterprise, serving as the connective tissue between regulatory obligations and day-to-day controls.
The position starts hands-on as a player-coach with expectations to build and lead a small team as the framework scales.

Own the enterprise non-financial control framework end to end
Map each obligation to the risks it creates and the first-line controls that mitigate them while surfacing gaps, redundancies, and orphaned controls
Write clear, testable control descriptions including control owner, frequency, control type, and required evidence
Define and enforce a common control taxonomy, rating scale, and documentation standard used consistently across the company
Identify where obligations are uncontrolled or under-controlled and drive remediation with first-line owners
Establish triggers and cadence that force the framework to update due to regulatory change, product launches, new state or carrier approvals, system migrations, organizational change, and audit or exam findings
Run periodic control owner attestation and framework refresh cycles
Partner with the Compliance Risk Management team to hand off ready-to-test controls and maintain clear separation of duties
Operate as a hands-on player-coach initially, then hire, develop, and manage a control framework analyst as scope grows
Support internal and third party audits, market conduct exams, regulatory requests, carrier requests, and data calls by producing control mapping and documentation

12+ years of relevant Compliance, controls, risk, or audit experience, including significant experience in insurance or another highly regulated financial services industry
Demonstrated ownership of a control framework or risk and control inventory at enterprise scale
Deep expertise in control design and documentation
Strong command of risk and control taxonomies, and control rating frameworks
Experience partnering with an independent testing or monitoring function, and comfort with separation of duties
Strong governance background, including experience presenting to risk and compliance committees and to executive leadership
Strong understanding of regulatory change management
Hands-on experience documenting and maintaining controls within GRC tooling administered by a partner team
Exceptional written and verbal communication skills
Experience hiring, developing, and managing a small team, or clear readiness to do so