Senior Manager, Security & Compliance
Core
Lead the global GRC function, overseeing security compliance programs and the US Regulated Markets team to align infrastructure with industry standards.
Role type
Senior Manager, Security & Compliance (GRC)
Builds
Comprehensive security compliance programs and US Regulated Markets frameworks
Domain
Cybersecurity, Regulatory Compliance, GRC
Required skills
GRC strategy, multi-framework compliance (ISO 27001, PCI DSS, SOC 1/2, Cyber Essentials), FedRAMP, ITAR, DoD IL4/5, audit leadership, risk management, policy architecture, team management, executive reporting, AI governance
Preferred skills
CISA, CISM, CISSP, ISO 27001 Lead Auditor, Unified Control Frameworks (UCF), NIST CSF, COBIT, GDPR, cloud security (AWS/Azure/GCP)
Technologies
AWS, Azure, GCP, AI tools
Responsibilities
Lead strategy for multi-framework compliance and execute internal/external audits; Act as senior escalation point for audit requests; Champion AI-first strategy for automated compliance monitoring; Oversee testing of security controls and access management; Author and maintain high-level security policies; Direct enterprise risk assessments and remediation plans; Manage and develop a team of GRC analysts; Partner with cross-functional leadership (People Ops, Finance, Legal, IT, Engineering); Synthesize compliance data for executive reporting; Oversee security awareness programs
Seniority
Senior, hands-on IC with team leadership
