Senior Manager of Security & Compliance

Join our team as a Senior Manager of Security & Compliance, where you will oversee our global GRC function and ensure our infrastructure and processes meet the highest industry standards. You will lead a team of specialists, manage multi-framework compliance, and drive the development and implementation of GRC tools. This role requires a deep understanding of security controls, regulatory knowledge, and a proactive approach to monitoring global regulatory changes.

• Oversee the design, implementation, and maturation of comprehensive security compliance programs, ensuring alignment with industry standards.
• Lead the strategy for multi-framework compliance, executing internal and external audits for various frameworks, and managing relationships with external auditors.
• Direct periodic assessments of security controls, policies, and standards across the organization, and lead the identification of control deficiencies.

• Cloud Infrastructure: Advanced knowledge of security controls within AWS (Azure or GCP is a plus)
• Deep Framework Expertise: Expert-level understanding of ISO 27001, PCI DSS, SOC frameworks, and Cyber Essentials. Experience in US Regulated markets like FedRAMP, ITAR, DOD IL4/IL5 as well
• Experience: 7+ years in security GRC or IT auditing, with at least 2 years in a supervisory or lead capacity
• Technical Depth: Practical understanding of security architecture, network security, and access control in cloud-native environments. Understanding of AI, AI governance and guardrails
• Strategic Communication: Proven ability to communicate complex security and compliance risks to executive stakeholders
• Automation Mindset: Track record of implementing automated evidence collection and process improvements
• Education: Bachelor’s or Master’s degree in Cybersecurity, IT, or a related field
• Professional Certifications: CISA, CISM, CISSP, or ISO 27001 Lead Auditor are highly preferred
• Framework Integration: Experience building Unified Control Frameworks (UCF) to map multiple standards simultaneously
• Regulatory Knowledge: Familiarity with NIST CSF, COBIT, or GDPR
• Technical mastery of how security controls satisfy diverse regulatory requirements
• Ability to manage multiple high-priority compliance projects and deadlines simultaneously
• A proactive approach to monitoring global regulatory changes and emerging security trends