{"id":1250372,"url":"https://alion.io/job/labcorp-senior-lead-cyber-compliance","title":"Senior Lead Cyber Compliance","company":{"id":5022,"name":"Labcorp","domain":"labcorp.com","url":"https://alion.io/company/labcorp","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":100,"open_postings":46,"ghost_share":0,"stale_share":0,"repost_share":0.043,"time_to_fill_p50_days":18,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Durham, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":93000,"max_usd":192000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST 800-53","optional":true}],"status":"live","first_seen_at":"2026-09-25T18:17:33Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-11-02T23:19:18Z","board_verified":true,"closed_at":null,"days_open":38,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":38},"description":"Labcorp is a global leader in laboratory services, providing the insights and answers that help healthcare providers, patients, researchers, pharmaceutical companies and health systems make confident decisions and improve outcomes. Through our unparalleled science, data, technology and laboratory network, we advance diagnostics, accelerate innovation and help address some of the world’s most important health challenges. As we shape the future of healthcare, we are leveraging advanced technologies, intelligent digital solutions and data-driven innovation across our operations to enhance how work gets done and deliver greater value to customers and patients. With our global scale and deep expertise, you’ll have the opportunity to do meaningful work, grow your career and make a real impact on people’s health around the world. Together, we’re improving health and improving lives.\nLabcorp is a global leader in diagnostic testing and drug development solutions, helping healthcare providers, researchers, and patients make informed decisions that advance care. Join us in our mission to improve health and improve lives.\nWork Schedule\nThis is a full-time, exempt (salaried) position assigned to a First Shift schedule, with standard business hours of Monday through Friday, 8:00 a.m. to 5:00 p.m. in EDT time zone. Business needs may occasionally require flexibility in work hours, including earlier, later, or additional hours, with reasonable notice provided when possible.\nRESPONSIBILITIES\nFramework Strategy & Rationalization\nEnable strategic alignment and rationalization across SOC2 Type 2, ISO 27001, NIST SP 800-53, PCI DSS, SOX ITGCs, FedRAMP, and CMMC (and related customer/regulatory requirements) to avoid duplicative effort and an unsustainable annual workload.\nSupport transitions between assurance approaches where appropriate (e.g., simplifying overlapping requirements) to meet expectations such as state and sector requirements (including TX-RAMP where applicable).\nPerform control mapping activities; identifying overlaps, gaps, and efficiency opportunities across standards, internal policies, and contractual obligations.\nEvidence Management, Customer Assurance, and Regulatory Support\nPreserve consistent, high-quality evidence production for assessments, customer RFIs, and regulatory requirements-reducing execution risk and downstream disruption.\nBuild and maintain a well-governed evidence repository with clear traceability, version control, retention, and audit defensibility aligned to enterprise standards.\nCoordinate timely, accurate responses to customer security questionnaires and assurance requests in partnership with control owners.\nOperational Risk Management & Issue Lifecycle\nMaintain effective operational risk management coverage, ensure monitoring, documentation, and issue lifecycle management continue without erosion as scope expands.\nTrack findings, exceptions, risks, and remediation activities; coordinate validation and closure documentation aligned to governance expectations.\nSupport risk reporting and governance cadence (e.g., risk forums, control owner check-ins) with clear status, trends, and escalation points.\nContinuity, Capacity, and Compliance Operations Excellence\nMitigate concentration and continuity risk within compliance/GRC by reducing reliance on a single overextended resource for critical audit and risk functions through documentation, process standardization, and repeatable operating routines.\nDevelop scalable compliance artifacts (templates, checklists, playbooks) to improve consistency and reduce rework across cycles.\nSustain audit readiness and customer confidence during increased compliance demands and post-acquisition integration complexity.\nStakeholder Partnership & Enterprise Governance\nServe as a primary compliance partner to control owners across Security, Engineering, IT, Legal, and Operations to drive timely evidence production and remediation outcomes.\nCommunicate status, risks, and blockers with precision; independently manage stakeholder follow-ups and escalate issues appropriately to protect timelines and quality.\nPromote a strong culture of compliance through clear guidance, practical enablement, and consistent expectations for evidence quality.\nMINIMUM QUALIFICATIONS\nBachelor’s Degree.\n5 or more years of experience supporting cybersecurity compliance assessments and audits aligned to one or more of the following: SOC Type 2, ISO 27001, NIST SP 800-53, FedRAMP, PCI DSS, SOX ITGCs, and CMMC.\n5 or more years of experience coordinating audit evidence and testing with multiple control-owner teams (e.g. security, Engineering, IT, Product, Finance).\nPREFERRED QUALIFICATIONS\n5 or more years with operating in post-acquisition or high-change environments with complex stakeholder landscapes.\n5 or more years of experience supporting CMMC readiness and/or working with defense-sector security requirements (e.g. SSP/POA&M development, control implementation tracking).\nADDITIONAL JOB STANDARDS\nIndependent execution and ownership mindset; proactive identification and removal of blockers.\nCompliance tooling (GRC platforms, ticketing systems, evidence repositories, workflow automation tools).\nRisk-based prioritization and sound judgment.\nExperience using AI-enabled tools to improve efficiency and quality in compliance workflows (e.g., drafting policies/procedures, summarizing evidence sets, accelerating RFI responses, mapping controls, identifying gaps).\nAbility to apply AI responsibly in accordance with confidentiality, data handling, and audit defensibility requirements.\nProcess discipline and attention to detail; strong documentation rigor.\nStakeholder management and clear, concise communication across multiple organizational levels.\nShould be open to travel up to 15% on occasion to assist with on-site audits if needed. \nComfortable working within formal governance, change control, and fixed assessment/audit timelines.\nThis role is responsible for leading and coordinating cybersecurity compliance assessments and audit readiness activities across multiple regulatory and industry frameworks, including SOC 2 Type II, ISO 27001, NIST 800-53, PCI DSS, SOX ITGC, FedRAMP, and CMMC.\nThe position ensures the successful execution of external audits and assessments by managing workplans, milestones, dependencies, and stakeholder engagement while maintaining audit-ready documentation, and evidence repositories.\nWorking closely with control owners and business partners, the role validates control effectiveness, supports assessment preparedness, and drives timely remediation of identified gaps. As a highly independent contributor, this position plays a critical role in helping Labcorp meet compliance obligations, strengthen its security governance posture, and maintain confidence with customers, regulators, and external assessors.\nBenefits: Employees regularly scheduled to work 20 or more hours per week are eligible for comprehensive benefits including: Medical, Dental, Vision, Life, STD/LTD, 401(k), Paid Time Off (PTO) or Flexible Time Off (FTO), Tuition Reimbursement and Employee Stock Purchase Plan. Employees regularly scheduled to work less than 20 hours, Casual, Intern, and Temporary employees are only eligible to participate in the 401(k) Plan. Employees who are regularly scheduled to work a 7 on 7 off schedule are eligible to receive all the foregoing benefits except PTO or FTO. For more detailed information, please click here.\nLabcorp is proud to be an Equal Opportunity Employer:\nLabcorp strives for inclusion and belonging in the workforce and does not tolerate harassment or discrimination of any kind. We make employment decisions based on the needs of our business and the qualifications and merit of the individual. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), family or parental status, marital, civil union or domestic partnership status, sexual orientation, gender identity, gender expression, personal appearance, age, veteran status, disability, genetic information, or any other legally protected characteristic. Additionally, all qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law.\nWe encourage all to apply\nIf you are an individual with a disability who needs assistance using our online tools to search and apply for jobs, or needs an accommodation, please visit our accessibility site or contact us at Labcorp Accessibility. For more information about how we collect and store your personal data, please see our Privacy Statement.","description_format":"text","description_chars":8721,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible time off"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Clinical Trial Services (CRO)","Medical Laboratories"],"lifecycle":[{"event":"open","at":"2026-09-25T18:17:33Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.675,"p_room":0.35,"age_days":37,"expected_fill_days":18,"reasons":["conf:0","velocity","win:tail","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/labcorp-senior-lead-cyber-compliance","json_url":"https://alion.io/job/labcorp-senior-lead-cyber-compliance.json","meta":{"generated_at":"2026-11-02T23:20:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32899,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5022},"rest":"https://alion.io/mcp/rest/get_company?id=5022"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flabcorp-senior-lead-cyber-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flabcorp-senior-lead-cyber-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flabcorp-senior-lead-cyber-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/labcorp-senior-lead-cyber-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flabcorp-senior-lead-cyber-compliance"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1250372}},{"tool":"search_jobs","arguments":{"company":"labcorp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1250372},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}