{"id":3515458,"url":"https://alion.io/job/aptiv-senior-manager-enterprise-cybersecurity-compliance","title":"Senior Manager, Enterprise Cybersecurity Compliance","company":{"id":5724,"name":"Aptiv","domain":"aptiv.com","url":"https://alion.io/company/aptiv","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":237,"ghost_share":0,"stale_share":0.928,"repost_share":0,"time_to_fill_p50_days":36,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Troy, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":194000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":true}],"status":"closed","first_seen_at":"2026-10-29T00:00:00Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-04T10:27:07Z","board_verified":false,"closed_at":"2026-11-04T10:27:07Z","days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"Role Summary\nAptiv is seeking an experienced Senior Manager, Enterprise Cybersecurity Compliance to lead the execution and coordination of its global cybersecurity compliance portfolio. This is a highly visible leadership position requiring strong program management capabilities, sound judgment, executive presence, and the ability to drive accountability across a complex, multinational organization.\nReporting to the Director, Enterprise GRC, this individual will oversee integrated compliance planning, assessment readiness, regulatory obligations, remediation commitments, and executive reporting across Aptiv's cybersecurity compliance programs. These include CMMC, NIS2, TISAX, FedRAMP, ISO 27001, applicable security requirements under GDPR, and customer and contractual cybersecurity obligations.\nThe Senior Manager will work closely with designated framework owners, regulatory specialists, Legal, Compliance, cybersecurity teams, and business leaders to ensure compliance activities are effectively coordinated and commitments are delivered. The position does not require deep expertise in every regulatory framework but does require sufficient cybersecurity and compliance knowledge to evaluate progress, challenge assumptions, identify risks, and drive effective outcomes.\nThis individual must be comfortable operating independently in demanding environments, including situations involving competing business priorities, regulatory pressures, and challenging senior stakeholder interactions. The successful candidate will demonstrate the confidence and professional maturity to lead difficult discussions, establish clear expectations, resolve ambiguity, and hold stakeholders accountable for agreed commitments.\nThe position will serve as a key U.S.-based leader within Enterprise GRC, representing the function in cross-functional and executive discussions and working closely with the CISO and senior cybersecurity leadership.\nYour Role\nEnterprise Compliance Portfolio Leadership\nLead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio, coordinating activities across designated regulatory and framework program owners.\nEstablish and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and key deliverables.\nProvide consistent oversight of compliance program execution, ensuring priorities, schedules, responsibilities, and reporting expectations are aligned across the organization.\nIdentify interdependencies, resource constraints, competing priorities, and other obstacles that could affect compliance commitments.\nDrive consistency in program planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.\nMaintain consolidated visibility into compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.\nSupport development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, improving consistency, efficiency, and reuse of control evidence across regulatory programs.\nAccountability and Remediation Oversight\nEstablish clear ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.\nDrive accountability across business, technology, and compliance stakeholders, including individuals and teams outside the position's direct reporting authority.\nActively manage overdue commitments, unresolved dependencies, and competing priorities to maintain progress toward compliance objectives.\nWork with program owners and responsible technical or business teams to establish realistic, risk-informed remediation plans.\nChallenge incomplete remediation plans, unsupported conclusions, and commitments that do not adequately address identified compliance risks.\nEnsure compliance issues are escalated through appropriate governance channels when ownership, priorities, or remediation progress cannot be resolved at the operational level.\nOversee validation of remediation closure, ensuring appropriate evidence is available and established acceptance criteria have been satisfied.\nIdentify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.\nRegulatory Intelligence and Obligations Management\nOversee the enterprise cybersecurity regulatory intelligence process, including horizon scanning, emerging requirements, applicability assessments, and regulatory change tracking.\nMaintain a centralized register of applicable cybersecurity regulatory, contractual, and customer obligations.\nCoordinate with Legal, Compliance, Privacy, and designated subject matter experts to confirm regulatory applicability, interpretation, and ownership.\nEnsure new or changing requirements are incorporated into compliance roadmaps, control frameworks, assessment activities, and remediation priorities.\nIdentify overlapping obligations and opportunities to streamline compliance activities across multiple frameworks.\nProvide leadership with visibility into emerging regulatory developments, potential business impacts, and required organizational actions.\nAssessment and Audit Coordination\nLead enterprise coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.\nEstablish consistent assessment planning and readiness expectations across designated framework owners and participating organizations.\nCoordinate assessment schedules, evidence requirements, accountable stakeholders, milestones, and escalation procedures.\nWork with framework specialists and control owners to ensure evidence is complete, current, validated, and ready for assessment.\nServe as a senior coordination and escalation point for assessment-related challenges, unresolved dependencies, and material findings.\nTrack assessment results and ensure findings are incorporated into accountable remediation plans.\nDrive lessons learned and improvements in assessment preparation, evidence management, and control validation.\nExecutive Engagement and Organizational Influence\nIndependently represent Enterprise GRC in cross-functional discussions involving senior cybersecurity, technology, Legal, Compliance, and business leadership.\nProvide concise, decision-oriented reporting on compliance program status, material risks, milestones, and remediation progress to the Director, Enterprise GRC, CISO, and other senior executives.\nLead complex discussions involving competing organizational priorities, regulatory concerns, assessment findings, and remediation expectations.\nExercise sound judgment and professional confidence when challenging assumptions, clarifying responsibilities, and addressing disagreements.\nBuild productive relationships with senior stakeholders while maintaining clear expectations for accountability and execution.\nEstablish clear decisions, accountable owners, milestones, and follow-up actions from significant compliance discussions.\nExercise delegated authority to coordinate compliance execution, resolve operational impediments, and escalate matters requiring executive intervention.\nServe as a trusted U.S.-based leadership representative of Enterprise GRC, capable of managing significant compliance matters independently within established authority.\nTeam Leadership and Operational Excellence\nLead, coach, and develop assigned cybersecurity compliance analysts and team members.\nEstablish clear performance expectations, priorities, and accountability for compliance deliverables.\nOversee team workload, assessment coordination, reporting activities, and remediation tracking.\nDevelop consistent practices for compliance planning, issue management, evidence validation, regulatory tracking, and executive reporting.\nFoster effective collaboration across framework owners, technical control owners, cybersecurity teams, and business organizations.\nPromote continuous improvement in compliance execution through process standardization, automation, and effective use of enterprise GRC platforms.\nBuild a team culture characterized by ownership, professionalism, sound judgment, and constructive engagement with stakeholders.\nYour Background\nBachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related discipline, or equivalent professional experience.\nDirect experience with CMMC Level 2, NIST SP 800-171, FedRAMP, or comparable U.S. government cybersecurity compliance requirements.\nSignificant progressive experience in cybersecurity governance, risk management, regulatory compliance, or enterprise cybersecurity program leadership.\nDemonstrated experience managing complex, multi-framework cybersecurity compliance programs within a large or geographically distributed organization.\nProven ability to drive accountability and deliver results across matrixed organizations, including stakeholders outside direct reporting authority.\nExperience leading and developing compliance analysts, GRC professionals, or comparable teams.\nExperience coordinating regulatory assessments, independent audits, customer security reviews, and associated remediation programs.\nStrong foundational knowledge of cybersecurity governance, risk management, and recognized control frameworks.\nAbility to evaluate compliance program performance, identify gaps, challenge remediation plans, and communicate material risks without serving as the primary subject matter expert for every applicable framework.\nDemonstrated experience working directly with senior Legal, Compliance, cybersecurity, technology, and business executives.\nStrong executive communication and presentation skills, including the ability to communicate difficult findings, defend recommendations, and facilitate decisions.\nExperience navigating challenging stakeholder interactions, competing organizational priorities, and high-pressure regulatory or assessment environments.\nStrong leadership, organizational, analytical, negotiation, and problem-solving capabilities.\nDemonstrated ability to independently establish priorities, manage ambiguity, and drive issues through resolution.\nAbility to work effectively with globally distributed teams across European and North American time zones.\nPreferred Qualifications\n Master's degree in Cybersecurity, Information Security, Risk Management, Business Administration (MBA), or a related discipline.\nFamiliarity with NIS2, TISAX, ISO 27001, applicable GDPR cybersecurity requirements, and other international regulatory frameworks.\nExperience leading cybersecurity compliance programs in defense contracting, automotive, aerospace, manufacturing, or similarly regulated multinational organizations.\nExperience coordinating CMMC assessments, third-party certification activities, government security reviews, or major customer cybersecurity assessments.\nFamiliarity with NIST CSF, NIST SP 800-53, and common control frameworks.\nExperience managing multiple regulatory program owners and subject matter experts across different business functions and geographies.\nExperience implementing or improving enterprise GRC platforms, compliance reporting, automated evidence collection, or continuous control monitoring.\nExperience supporting cybersecurity compliance transformation, operating-model improvements, or integration of compliance programs across business organizations.\nRelevant professional certifications such as CISSP, CISM, CISA, CRISC, or comparable credentials.\nWhy join Aptiv ?\n· You grow at Aptiv. Aptiv's winning culture is global by design. We bring together diverse perspectives, cultures, and business contexts to solve our customers' toughest challenges. In this environment, every individual can grow, lead, and make an impact, regardless of background, because inclusion fuels how we innovate and win.\n· You make an impact at Aptiv. One of the strengths of humanity is our drive to pro...","description_format":"text","description_chars":14048,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Parental leave","Relocation assistance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Cybersecurity","Information Security","Security Compliance","Electrical Equipment & Cables"],"lifecycle":[{"event":"open","at":"2026-10-30T10:14:44Z"},{"event":"close","at":"2026-11-04T10:27:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3 · green card filings: 51","filings_12m":3,"filings_prev_12m":82,"green_card_filings_12m":51,"median_offered_wage_usd":109444,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":null,"pay":null,"html_url":"https://alion.io/job/aptiv-senior-manager-enterprise-cybersecurity-compliance","json_url":"https://alion.io/job/aptiv-senior-manager-enterprise-cybersecurity-compliance.json","meta":{"generated_at":"2026-11-05T12:24:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16126,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5724},"rest":"https://alion.io/mcp/rest/get_company?id=5724"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faptiv-senior-manager-enterprise-cybersecurity-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faptiv-senior-manager-enterprise-cybersecurity-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faptiv-senior-manager-enterprise-cybersecurity-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aptiv-senior-manager-enterprise-cybersecurity-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faptiv-senior-manager-enterprise-cybersecurity-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3515458}},{"tool":"search_jobs","arguments":{"company":"aptiv.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3515458},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}