Global Security Governance, Risk & Compliance Manager
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Global Security GRC Manager leading CMMC, vendor risk, data protection, and resilience programs. Driving security governance across engineering, manufacturing, and corporate environments.
Responsibilities:
- Drive and sustain governance, risk, and compliance across engineering, manufacturing, and corporate environments
- Report to the CISO and lead a team of GRC professionals
- Lead enterprise-wide IT execution of CMMC and other compliance program lifecycles
- Define scope, SSP/POA&M, evidence quality and refresh cadence, assessor coordination, corrective-action closure, and site-level readiness
- Coordinate control owners through a global matrix model
- Translate policies and strategic objectives into standardized processes across plants, engineering teams, and corporate functions
- Drive remediation programs and provide transparency into readiness, progress, and risk
- Mentor team members, prioritize workload, develop capability, and foster global collaboration
- Own preparation for and participation in customer and third-party audits and security questionnaires
- Leverage AI technologies to reduce manual GRC effort
- Maintain a business-impact view of risk, track remediation commitments, and escalate gaps to leadership
- Coordinate evidence, close findings, and establish sustainable corrective-action plans
- Champion a global security culture and promote accountability and risk ownership
- Translate regulatory topics into clear employee expectations
- Partner with HR and stakeholders to deliver targeted training, awareness, and role-based education
- Manage the end-to-end vendor security risk lifecycle, including assessments, treatment, remediation, and monitoring
- Operate supplier security expectations with key stakeholders and escalate systemic vendor-risk trends
- Govern data protection for intellectual property, manufacturing processes, export-controlled data, and cloud workloads
- Validate classification, DLP, access-control, and retention standards
- Govern security and compliance aspects of business continuity and disaster recovery readiness
- Define resilience-control requirements and validate recovery playbooks, exercises, and evidence
- Partner with technology and business service owners to close identified gaps
Requirements:
- Minimum of 7 years of IT GRC, information security, or regulated compliance experience
- Preferably 2 years managing a geographically diverse team
- Demonstrated ability to use generative AI and automation responsibly to improve analysis, evidence operations, knowledge management, and workflow efficiency
- Experience evaluating AI risk and governance preferred
- Defense experience strongly preferred
- Demonstrated experience with CMMC, NIST SP 800-171, and/or DFARS readiness and audit execution
- Strong oral and written communication skills
- Ability to lead cultural changes, influence people, and provide technical strategic direction
- Demonstrated problem-solving and organizational skills
- Ability to work on multiple programs at one time
- Bachelor's degree from an accredited college/university or equivalent experience
- CISSP, CISM, CRISC, CGEIT, GRCP, CGRC, GSLC, PMP, or other relevant certification preferred
- Must meet applicable U.S. export-control requirements; controlled-information access may require U.S. Person status or an export-control license
Benefits:
- Reasonable accommodation for applicants with disabilities
- Full-time remote work arrangement
Similar Jobs
Deliverability & Compliance Manager – Cross-channel, SMS focus
Deliverability and Compliance Manager protecting Omnisend’s ecommerce messaging channels. Managing SMS operations, registrations, carrier compliance, investigations, and cross-channel deliverability improvements.
Regulatory Law Expert
Regulatory law expert designing compliance scenarios, reference documents, and judgment rubrics. Supporting Mercor’s AI labs and enterprises in training frontier models.
Data Compliance Consultant
Consultant conformité Data chez Talan, groupe international de conseil en technologie et data. Audits, analyse réglementaire et pilotage de projets RGPD, LCB-FT et BCBS 239.
Compliance Associate – Medicare/ACA
Compliance Associate supporting Medicare/ACA regulatory operations at Senior Market Sales. Managing investigations, audits, marketing approvals, training, and compliance reporting.
Regulatory Representative
Regulatory Representative managing Globalstar’s satellite communications compliance and licensing. Coordinating FCC, ITU, spectrum, export-control, and agency matters across global markets.
Manager, Governance, Risk & Compliance
Senior GRC leader scaling Doppel’s security, privacy, compliance, and AI governance program. Owning certifications, enterprise risk, controls, customer trust, and a growing GRC team.
Compliance Assurance Manager
Compliance Assurance Manager leading quality monitoring, regulatory controls, and compliance training. Supporting Sumer’s Hubs and teams in maintaining high standards across its compliance programme.
Regulatory and Start Up Specialist, Portuguese Speaker
Regulatory and Start Up Specialist enabling clinical trial site activation in Spain for Precision for Medicine, a global clinical research organization. Managing submissions, contracts, budgets, and essential documents.
Regulatory and Site Start-Up Specialist
Regulatory and Site Start-Up Specialist supporting clinical trial submissions and site activation in Taiwan. Coordinating authorities, ethics committees, essential documents, and cross-functional study teams.
Security/Compliance SME
Security/compliance SME advancing Department of the Air Force ICAM capabilities for Koniag Government Services. Aligning Zero Trust architectures, ATO processes, and governance studies with DoD policy.
Consultant, Accreditation Compliance
Accreditation compliance consultant supporting Navitus’ pharmacy benefit manager quality programs. Leading audits, accreditation readiness, corrective actions, and stakeholder education.
SCRM Compliance SME
SCRM compliance expert securing federal technology supply chains for Accenture Federal Services. Developing policies, assessments, controls, and audit evidence across 500+ projects.
Regulatory Specialist – Canada
Local Regulatory specialist supporting Health Canada lifecycle submissions for biologic and small molecule rare disease products. Providing Canadian regulatory intelligence and coordinating Health Canada interactions.
CMC Regulatory Consultant, Biologics
CMC Regulatory Consultant supporting biologic and rare-disease product submissions to Health Canada. Managing Canadian life-cycle regulatory activities, CMC authoring, and regulatory intelligence for Syneos Health clients.
Senior DOT Compliance Instructor
Senior DOT compliance instructor training commercial drivers and overseeing fleet compliance for SOLV Energy’s utility-scale energy infrastructure projects. Fully remote with 70–80% travel to field locations.
Senior Regulatory Affairs Program Lead – MedTech Surgery
Regulatory Affairs Lead advancing Johnson & Johnson’s OTTAVA robotic instruments and accessories approvals. Developing global strategies, authoring FDA submissions, and guiding product teams.
Senior Regulatory Affairs Specialist
Senior Regulatory Affairs Specialist advancing regulatory strategy for Eko Health’s FDA-cleared AI stethoscopes, ECG hardware, and digital health platforms. Leading QMS remediation and global market submissions.
Senior Compliance Analyst
Senior Compliance Analyst investigating escalated Medicare Advantage sales and marketing compliance cases for Devoted Health. Recommending corrective actions, improving workflows, and supporting compliance analysts.
Senior Compliance Analyst – Healthcare Regulatory Compliance
Senior Compliance Analyst safeguarding Cuvo Health’s telehealth MSO infrastructure across US healthcare regulations. Auditing physician arrangements, FMV compensation, licensing, and multi-state compliance.
Senior Regional Compliance Officer
Senior Compliance Officer overseeing MoneyGram agent AML/CFT and anti-fraud compliance across Australia and New Zealand. Acting as Deputy Compliance Officer and liaising with regulators and law enforcement.