Senior Manager, Enterprise Cybersecurity Compliance

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the execution and coordination of Aptiv's global enterprise cybersecurity compliance portfolio.

• Create and maintain an enterprise compliance roadmap that includes assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and deliverables.

• Supervise the execution of the compliance program, ensuring assessment readiness, evidence management, issue tracking, remediation follow-through, and consolidated visibility into compliance.

• Assist in the development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities.

• Define ownership, milestones, and criteria for the closure of compliance findings, deficiencies, and remediation commitments.

• Foster accountability among business, technology, and compliance stakeholders while managing overdue commitments and unresolved dependencies.

• Oversee cybersecurity regulatory intelligence, including horizon scanning, applicability assessments, regulatory change tracking, and obligations management.

• Collaborate with Legal, Compliance, Privacy, and subject matter experts regarding regulatory applicability, interpretation, and ownership.

• Lead the coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.

• Manage assessment schedules, evidence requirements, stakeholders, milestones, and escalation procedures.

• Provide executive reports on compliance status, risks, milestones, and remediation progress to the Director, Enterprise GRC, CISO, and senior executives.

• Represent Enterprise GRC in cross-functional and executive discussions, leading complex stakeholder conversations.

• Mentor and develop assigned cybersecurity compliance analysts and team members.

• Oversee team workload, assessment coordination, reporting, and remediation tracking.

• Encourage process standardization, automation, enterprise GRC platform utilization, and continuous improvement.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related field, or equivalent professional experience.

• Direct experience with CMMC Level 2, NIST SP 800-171, FedRAMP, or similar U.S. government cybersecurity compliance standards.

• Extensive progressive experience in cybersecurity governance, risk management, regulatory compliance, or enterprise cybersecurity program leadership.

• Proven track record of managing complex, multi-framework cybersecurity compliance programs within large or geographically diverse organizations.

• Demonstrated ability to enforce accountability and achieve results across matrixed organizations, including stakeholders beyond direct reporting lines.

• Experience in leading and developing compliance analysts, GRC professionals, or similar teams.

• Familiarity with coordinating regulatory assessments, independent audits, customer security reviews, and related remediation initiatives.

• Strong foundational knowledge of cybersecurity governance, risk management, and recognized control frameworks.

• Capability to assess compliance program performance, identify gaps, challenge remediation strategies, and communicate significant risks.

• Proven experience in working directly with senior Legal, Compliance, cybersecurity, technology, and business executives.

• Excellent executive communication and presentation skills.

• Experience in navigating complex stakeholder interactions, competing organizational priorities, and high-pressure regulatory or assessment situations.

• Strong leadership, organizational, analytical, negotiation, and problem-solving skills.

• Proven ability to independently set priorities, manage uncertainty, and drive issues to resolution.

• Ability to collaborate effectively with globally distributed teams across European and North American time zones.

• Preferred: Master’s degree in Cybersecurity, Information Security, Risk Management, Business Administration (MBA), or a related field.

• Preferred familiarity with NIS2, SOX, TISAX, ISO 27001, GDPR cybersecurity standards, NIST CSF, NIST SP 800-53, and common control frameworks.

• Preferred experience in defense contracting, automotive, aerospace, manufacturing, or similarly regulated multinational organizations.

• Preferred certifications such as CISSP, CISM, CISA, or CRISC.

🏝️ Benefits

• Private health care effective from day one of employment.

• Life and accident insurance.

• Paid Time Off (Holidays, Vacation, Designated time off, Parental leave).

• Relocation assistance may be available.

• Opportunities for learning and development.

• Discount programs with various manufacturers and retailers.

• Recognition for innovation and excellence.

• Opportunities to contribute to the community.

• Tuition Reimbursement.

• Competitive benefits package supporting both physical and mental well-being.

• An inclusion-focused global culture with opportunities for growth, leadership, and impact.