Cyber Compliance Oversight Manager

3M•Austin, TX

3d•$164,612 - $201,193•Onsite

About The Position

This position provides an opportunity to transition from other private, public, government or military experience to a 3M career. In this role, you will be responsible for overseeing the Managed Services Provider (MSP) that delivers day‑to‑day cybersecurity and technology compliance services. Your oversight will ensure that our Cyber Compliance Management Program operates effectively across unified controls framework sustainment, control assessments, compliance monitoring, readiness reviews, and reporting. You will evaluate the quality and accuracy of the MSP’s work, verify alignment with 3M’s compliance standards and regulatory expectations, and ensure timely execution of all compliance activities. Through effective oversight, strategic guidance, and partnership with internal stakeholders, you will help maintain a strong cyber and technology compliance posture, safeguard the organization from regulatory and control gaps, and support leadership with clear, actionable compliance insights.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Management (completed and verified prior to start)
Five (5) years of experience in cyber compliance operations role in a private, public, government or military environment
Strong analytical abilities to evaluate compliance results, identify patterns or gaps, and recommend mitigation strategies.
Ability to communicate complex compliance topics clearly to technical and non‑technical audiences, including senior leadership.
Experience managing multiple concurrent compliance activities, ensuring timely execution, and maintaining clear status transparency.
Ability to work effectively with cybersecurity teams, IT, legal, risk, internal audit, and business stakeholders in a coordinated compliance approach.
Strong focus on accuracy and completeness in compliance reporting, documentation, and evidence review.

Nice To Haves

Deep understanding of cybersecurity principles, practices, regulatory obligations, and common control frameworks.
Familiarity with relevant regulatory requirements and industry standards such as ISO 27001, NIST CSF, SOX, PCI, CMMC, TISAX, SWIFT, and other cyber compliance obligations.
Experience managing compliance programs, including control framework governance, regulatory change management, and compliance monitoring.
Proven experience conducting or overseeing control assessments, evaluating design and operating effectiveness, and interpreting control test evidence.
Commitment to staying current with emerging regulations, compliance expectations, and best practices, and continuously improving compliance processes.
CISSP certification or one of the following certifications such as CISA, CISM, ISO 27001 Lead Auditor

Responsibilities

Overseeing the managed services relationship responsible for cybersecurity compliance operations, ensuring delivery quality across all services.
Reviewing and approving MSP outputs, including obligations updates, unified control framework changes, control assessment results, monitoring outcomes, and compliance reports.
Monitoring MSP performance against SLAs and KPIs, ensuring consistent adherence to scope, quality expectations, and timelines.
Conducting regular service delivery reviews and providing direction to drive continuous improvement in compliance operations.
Partnering with the MSP to assess regulatory changes, evaluate applicability, and ensure updates to compliance obligations and common controls are accurate and timely.
Collaborating with the MSP on planning and execution of risk‑based control assessments, executing reviews of control design and operating effectiveness, and validating remediation plans for identified gaps.
Overseeing ongoing compliance monitoring results, ensuring timely follow‑up and escalation of potential issues or trends.
Supporting readiness assessments for compliance initiatives by reviewing gap analyses, maturity evaluations, and required enhancements.
Serving as the escalation and coordination point with Internal Audit, ensuring adequate evidence preparation, timely responses, and alignment with control and regulatory expectations.
Working with leadership to present monthly compliance metrics and insights through dashboards and executive reporting provided by the MSP.
Responsibilities of this position include that corporate policies, procedures and security standards are complied with while performing assigned duties.
Safety is a core value at 3M. All employees are expected to contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.