Global Security Governance, Risk & Compliance Manager (Remote)

Core Responsibilities

• Program Ownership & Leadership
• Lead enterprise-wide IT execution of CMMC and other compliance program lifecycles, including scope definition, SSP/POA&M, evidence quality and refresh cadence, assessor coordination, corrective action closure, and site-level readiness
• Directly manage and develop a GRC team while coordinating control owners through a global matrix model
• Translate policy and strategic objectives into repeatable, standardized processes across plants, engineering teams, and corporate functions
• Drive remediation programs and create transparency into readiness, progress, and risk
• Mentor, prioritize workload, develop capability, and foster global collaboration
• Promote a supportive, performance-oriented culture of velocity, integrity, and teamwork
• Own preparation and participation in customer and third-party audits and security questionnaires
• Leverage AI technologies to reduce manual effort required to sustain the GRC program
• Maintain a business-impact view of risk, track remediation commitments, and escalate gaps to leadership
• Coordinate evidence, drive findings closure, establish sustainable corrective action plans

Security Culture

Global Vendor Risk Management

Data Protection

Business Continuity & Resilience

Qualifications

• Minimum of 7 years of IT GRC, information security, or regulated compliance experience, preferably with 2 years managing a geographically diverse team
• Demonstrated ability to use generative AI and automation responsibly to improve analysis, evidence operations, knowledge management, and workflow efficiency; experience evaluating AI risk and governance preferred
• Defense experience strongly preferred
• Demonstrated experience with CMMC, NIST SP 800-171, and/or DFARS readiness and audit execution
• Strong oral and written communicator who can lead cultural changes, influence people and provide technical strategic direction
• Demonstrated problem solving and organizational skills; ability to work multiple programs at one time
• CISSP, CISM, CRISC, CGEIT, GRCP, CGRC, GSLC, PMP or other relevant certification preferred
• Education Requirements:
• Bachelor's degree from an accredited college/university or equivalent experience
• This job position may include access to controlled information or technology subject to U.S. export control laws. If an applicant does not meet the definition of a “U.S. Person” (which includes U.S. citizens, U.S. lawful permanent residents, and those granted U.S. asylum or refugee status), the Company may be required to obtain an export control license. If the position for which you applied involves access to controlled information or technology subject to U.S. export control laws, then any offer is also contingent on verification of appropriate documentation for the Company to assess whether an export license will be required to employ you in that role, and if it is determined that an export license is required, the offer is also contingent on the Company’s determination, in its sole discretion, whether a license application and ongoing administration is prudent under the project’s contract parameters and whether an export license can be successfully obtained before you can start in that role. Export license applications may take several weeks to be processed.