Senior Manager, Enterprise Cybersecurity Compliance

Description

The company is hiring a senior manager to lead and coordinate its global cybersecurity compliance portfolio. The role calls for strong program management, sound judgment, executive presence, and the ability to drive accountability across a large, multinational organization.

You will report to the Director of Enterprise GRC and oversee compliance planning, assessment readiness, regulatory obligations, remediation commitments, and executive reporting. The programs in scope include CMMC, NIS2, TISAX, FedRAMP, ISO 27001, the cybersecurity parts of GDPR, and customer and contract security obligations.

You will work with framework owners, regulatory specialists, Legal, Compliance, cybersecurity teams, and business leaders to keep compliance work coordinated and on schedule. Deep expertise in every framework is not required, but you need enough knowledge to judge progress, question assumptions, spot risks, and push for results.

This is a U.S.-based role within Enterprise GRC. You will represent the function in cross-functional and executive discussions and work closely with the CISO and senior cybersecurity leaders. You will operate independently in demanding settings with competing priorities, regulatory pressure, and difficult stakeholders.

Responsibilities

• Lead the coordinated execution of the enterprise cybersecurity compliance portfolio across the framework and regulatory program owners.
• Build and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation work, and key deliverables.
• Oversee compliance execution and make sure priorities, schedules, responsibilities, and reporting expectations line up across the organization.
• Spot dependencies, resource gaps, competing priorities, and other obstacles that could put compliance commitments at risk.
• Standardise planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.
• Keep a consolidated view of compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.
• Help develop and adopt the Common Control Framework and continuous compliance capabilities, so control evidence is more consistent, efficient, and reusable across regulatory programs.
• Set clear ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.
• Hold business, technology, and compliance stakeholders accountable, including people outside your direct reporting line.
• Actively track overdue commitments, open dependencies, and competing priorities to keep compliance objectives moving.
• Work with program owners and responsible teams to build realistic, risk-based remediation plans.
• Challenge weak remediation plans, unsupported conclusions, and commitments that do not address the compliance risk.
• Escalate through the right governance channels when ownership, priorities, or remediation progress cannot be settled at the operational level.
• Verify that remediation is closed, with adequate evidence and agreed acceptance criteria met.
• Find recurring weaknesses and work with teams on lasting corrective actions.
• Oversee the enterprise regulatory intelligence process, including horizon scanning, new requirements, applicability reviews, and regulatory change tracking.
• Maintain a central register of cybersecurity regulatory, contractual, and customer obligations.
• Work with Legal, Compliance, Privacy, and subject matter experts to confirm applicability, interpretation, and ownership of obligations.
• Make sure new or changed requirements flow into roadmaps, control frameworks, assessment activities, and remediation priorities.
• Identify overlapping obligations and ways to streamline work across frameworks.
• Give leadership clear visibility into regulatory developments, likely business impact, and the actions the organization needs to take.
• Lead enterprise coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.
• Set consistent assessment planning and readiness expectations for framework owners and participating organizations.
• Coordinate assessment schedules, evidence needs, accountable stakeholders, milestones, and escalation paths.
• Work with framework specialists and control owners to make sure evidence is complete, current, validated, and assessment-ready.
• Act as the senior point of coordination and escalation for assessment issues, open dependencies, and material findings.
• Track assessment results and make sure findings feed into owned remediation plans.
• Drive lessons learned and better practices in assessment preparation, evidence management, and control validation.
• Represent Enterprise GRC independently in discussions with senior cybersecurity, technology, Legal, Compliance, and business leaders.
• Give the Director of Enterprise GRC, the CISO, and other senior executives short, decision-focused reports on program status, material risks, milestones, and remediation progress.
• Lead difficult discussions involving competing priorities, regulatory concerns, assessment findings, and remediation expectations.
• Use sound judgment to challenge assumptions, clarify responsibilities, and resolve disagreements.
• Build strong relationships with senior stakeholders while setting clear expectations for accountability and delivery.
• Record clear decisions, accountable owners, milestones, and follow-up actions from important compliance discussions.
• Use delegated authority to coordinate compliance work, clear operational blockers, and escalate matters that need executive action.
• Lead, coach, and develop the cybersecurity compliance analysts and team members who report to you.
• Set clear performance expectations, priorities, and accountability for compliance deliverables.
• Manage team workload, assessment coordination, reporting, and remediation tracking.
• Set consistent practices for compliance planning, issue management, evidence validation, regulatory tracking, and executive reporting.
• Encourage collaboration across framework owners, technical control owners, cybersecurity teams, and business units.
• Improve compliance execution through process standardisation, automation, and effective use of enterprise GRC platforms.
• Build a team culture based on ownership, professionalism, sound judgment, and constructive stakeholder engagement.

Requirements

• A bachelor's degree in cybersecurity, IT, information systems, risk management, business, or a related field, or equivalent professional experience.
• Direct experience with CMMC Level 2, NIST SP 800-171, FedRAMP, or comparable U.S. government cybersecurity requirements.
• Significant, progressively senior experience in cybersecurity governance, risk management, regulatory compliance, or enterprise security program leadership.
• Experience running complex, multi-framework cybersecurity compliance programs in a large or geographically spread organisation.
• A track record of driving accountability and delivering results across matrixed organisations, including people outside your direct authority.
• Experience leading and developing compliance analysts, GRC professionals, or similar teams.
• Experience coordinating regulatory assessments, independent audits, customer security reviews, and the remediation that follows.
• Solid working knowledge of cybersecurity governance, risk management, and recognised control frameworks.
• Ability to assess compliance program performance, find gaps, challenge remediation plans, and communicate material risk without being the main expert for every framework.
• Experience working directly with senior Legal, Compliance, cybersecurity, technology, and business executives.
• Strong executive communication and presentation skills, including delivering hard findings, defending recommendations, and driving decisions.
• Experience handling difficult stakeholders, competing priorities, and high-pressure regulatory or assessment situations.
• Strong leadership, organisation, analysis, negotiation, and problem-solving skills.
• Proven ability to set priorities independently, work through ambiguity, and see issues to resolution.
• Ability to work effectively with globally distributed teams across European and North American time zones.
• Preferred: a master's degree in cybersecurity, information security, risk management, business administration (MBA), or a related field.
• Preferred: familiarity with NIS2, SOX, TISAX, ISO 27001, GDPR cybersecurity requirements, and other international regulatory frameworks.
• Preferred: experience leading cybersecurity compliance programs in defence contracting, automotive, aerospace, manufacturing, or similar regulated multinational businesses.
• Preferred: experience coordinating CMMC assessments, third-party certifications, government security reviews, or major customer cybersecurity assessments.
• Preferred: familiarity with NIST CSF, NIST SP 800-53, and common control frameworks.
• Preferred: experience managing multiple regulatory program owners and subject matter experts across functions and regions.
• Preferred: experience implementing or improving enterprise GRC platforms, compliance reporting, automated evidence collection, or continuous control monitoring.
• Preferred: experience supporting cybersecurity compliance transformation, operating model changes, or integrating compliance programs across business units.
• Preferred: relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent.

Conditions

Based in the U.S. as a key leadership representative for Enterprise GRC.

The company is an equal opportunity employer.

Benefits

• Private health care from day one of employment.
• Life and accident insurance.
• Paid time off, including holidays, vacation, designated time off, and parental leave.
• Relocation assistance may be available.
• Learning and development opportunities.
• Discount programmes with various manufacturers and retailers.
• Recognition for innovation and excellence.
• Opportunities to give back to the community.
• Tuition reimbursement.