{"id":4143656,"url":"https://alion.io/job/cisco-systems-security-governance-compliance-manager","title":"Security Governance & Compliance Manager","company":{"id":90,"name":"Cisco Systems","domain":"cisco.com","url":"https://alion.io/company/cisco-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":283,"ghost_share":0.06,"stale_share":0.442,"repost_share":0.106,"time_to_fill_p50_days":26,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Management","role_family":"Management","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San José, Costa Rica"],"countries":["CR"],"hiring_countries":["CR"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"Python","optional":true},{"name":"Splunk","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-11-09T00:00:00Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-12T15:56:33Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"The role provides risk owners and senior leadership with what they need to make informed risk decisions. It takes the lead on the most complex, ambiguous, or high-visibility risk work in the program. It owns technical security risk assessments end-to-end, drives remediation and residual-risk decisions, and represents the risk program in executive and audit forums. The person works with significant independence, mentors other analysts, and represents Risk Management where technical leaders and executives make real decisions.\nResponsibilities\nIndependently lead complex, ambiguous, or cross-functional technical risk assessments with minimal oversight, using AI-assisted assessment tools where applicable.\nServe as a trusted advisor to senior technical leaders and executives on risk posture, prioritization, and tradeoffs.\nDevelop and deliver executive-level risk reporting, metrics, and trend analysis, translating technical risk into business impact for CISO and leadership audiences, including board-level support.\nOwn escalation and negotiation on high-risk exception requests and complex remediation disputes, assessing residual risk and compensating controls independently.\nMonitor the risk portfolio at program level, identify systemic gaps or patterns across the register, and drive process, tooling, or automation improvements.\n Maintain and improve risk register data quality (ownership, treatment plans, due dates, closure criteria), setting the standard for other analysts.\nLead support for internal and external audits, including owning evidence packages, documentation, and process walkthroughs.\n Build strong relationships with engineering leaders and business unit executives.\nLead difficult, high-stakes conversations with technical and executive stakeholders.\nMentor and guide junior and mid-level risk analysts.\nMinimun Qualifications:\nBachelor's degree or equivalent work experience.\nProfessional certification such as GIAC, CISSP, CRISC, CISM, CISA, ISO 27001 LI/LA, CCSK, or CCSP.\n7-10+ years of hands-on technical risk assessments in a security risk management role, including independently owning complex or ambiguous assessments end-to-end.\nDeep cloud technical knowledge (AWS, Azure, GCP): able to independently evaluate an architecture, find non-obvious control gaps, and advise engineering leaders on remediation, not just flag the gap.\nExtensive hands-on experience leading assessments and audits against frameworks (NIST CSF/RMF, ISO 27001/27002, ISO 42001, NIST AI RMF), including shaping how frameworks are applied.\nPreferred Qualifications:\nSplunk products, SPL, and building dashboards and reports.\nPython or SQL for risk metrics and program-level automation.\nMentoring analysts or informally leading a workstream or team.\nPreparing materials for, or presenting in, board-level or executive governance forums.\nThriving in ambiguity, including defining new processes where none exist.\nWhy Cisco?\nAt Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era - and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.\nFueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.\nWe are Cisco, and our power starts with you.","description_format":"text","description_chars":3768,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Costa Rica","iso":"CR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Unified Communications","Endpoint Security","Observability & APM"],"lifecycle":[{"event":"open","at":"2026-11-12T06:12:27Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":3,"expected_fill_days":26,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/cisco-systems-security-governance-compliance-manager","json_url":"https://alion.io/job/cisco-systems-security-governance-compliance-manager.json","meta":{"generated_at":"2026-11-12T20:59:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":44366,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":90},"rest":"https://alion.io/mcp/rest/get_company?id=90"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcisco-systems-security-governance-compliance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcisco-systems-security-governance-compliance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcisco-systems-security-governance-compliance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cisco-systems-security-governance-compliance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcisco-systems-security-governance-compliance-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4143656}},{"tool":"search_jobs","arguments":{"company":"cisco.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4143656},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}