Security and Compliance Manager
Posted 15 Oct 2026
Advertised as “Senior Manager, Security & Compliance”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 7+ yrs
- Management level
- People management
No salary listed for this role.
CertificationsCISA, CISM, CISSP, ISO 27001 Lead Auditor
Field of studyCybersecurity, Information Technology (or related)
Study levelBachelor's or higher
We are looking for a strategic and hands-on Senior Manager, Security and Compliance to oversee our global GRC function. This leader will be responsible for the design, implementation, and maturation of our comprehensive security compliance programs, ensuring our infrastructure and processes meet the highest industry standards. You will manage a team of specialists to align our security posture with an expanding portfolio of frameworks, including ISO 27001, PCI DSS, SOC 1/2, and Cyber Essentials. You will also manage the US Regulated Markets team, which will manage FedRAMP, ITAR, and iL4/5 programs.
What You’ll Do:
Compliance Strategy & Audit Leadership
- Program Oversight: Lead the strategy for multi-framework compliance, executing internal and external audits for ISO 27001, SOC 1, SOC 2, PCI DSS, and Cyber Essentials, along with FedRAMP, ITAR, and DoD IL4/5.
- Audit Management: Act as the senior point of escalation for audit requests, defining testing scopes and managing relationships with external auditors.
- AI and Automation: Champion an AI-first strategy for GRC by integrating artificial intelligence and automated workflows to streamline continuous compliance monitoring, automated evidence collection, and predictive risk management across global frameworks.
- Control Governance: Oversee the regular testing of security controls, including access management, change control, and data recovery.
- Compliance by Design: Ensure all new systems are onboarded into the environment with a "compliance by design" approach.
Risk & Governance Management
- Enterprise Risk: Direct periodic assessments of security controls, policies, and standards across the entire organization.
- Remediation Strategy: Lead the identification of control deficiencies and approve robust remediation plans to address gaps.
- Policy Architecture: Author and maintain high-level information security policies and standards to ensure global regulatory alignment.
- GRC Roadmap: Drive the development and implementation of GRC tools and centralized evidence repositories to streamline operations.
Team Leadership & Collaboration
- Mentorship: Manage and develop a team of GRC analysts, fostering a culture of technical excellence and automation.
- Stakeholder Engagement: Partner with leadership in People Ops, Finance, Legal, IT, and Engineering to bridge cross-functional control gaps.