Senior Manager, Enterprise Cybersecurity Compliance

Aptiv•Troy, MI

About The Position

Aptiv is seeking an experienced Senior Manager to lead the execution and coordination of its global cybersecurity compliance portfolio. This visible leadership role oversees integrated compliance planning, assessment readiness, regulatory obligations, remediation commitments, and executive reporting across programs such as CMMC, NIS2, TISAX, FedRAMP, ISO 27001, applicable GDPR security requirements, and customer and contractual cybersecurity obligations. The role requires strong program management, sound judgment, executive presence, and the ability to establish accountability across a complex multinational organization. Deep expertise in every framework is not required, but sufficient cybersecurity and compliance knowledge is needed to evaluate progress, challenge assumptions, identify risks, and drive outcomes. The position reports to the Director, Enterprise GRC and works closely with framework owners, regulatory specialists, Legal, Compliance, cybersecurity teams, and business leaders. As a key U.S.-based Enterprise GRC leader, the Senior Manager represents the function in cross-functional and executive discussions and works closely with the CISO and senior cybersecurity leadership. The role requires independent operation in demanding environments, including competing business priorities, regulatory pressures, and challenging senior stakeholder interactions. The Senior Manager leads enterprise compliance planning and execution; oversees remediation and assessment readiness; manages regulatory intelligence and obligation tracking; and provides leadership with clear reporting on compliance posture, risks, milestones, and progress. The role also leads, coaches, and develops assigned compliance analysts and team members, and promotes consistent, efficient practices through standardization, automation, and effective use of enterprise GRC platforms.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related discipline, or equivalent professional experience.
Direct experience with CMMC Level 2, NIST SP 800-171, FedRAMP, or comparable U.S. government cybersecurity compliance requirements.
Significant progressive experience in cybersecurity governance, risk management, regulatory compliance, or enterprise cybersecurity program leadership.
Demonstrated experience managing complex, multi-framework cybersecurity compliance programs in a large or geographically distributed organization.
Proven ability to drive accountability and deliver results across matrixed organizations, including with stakeholders outside direct reporting authority.
Experience leading and developing compliance analysts, GRC professionals, or comparable teams.
Experience coordinating regulatory assessments, independent audits, customer security reviews, and associated remediation programs.
Strong foundational knowledge of cybersecurity governance, risk management, and recognized control frameworks.
Ability to evaluate compliance program performance, identify gaps, challenge remediation plans, and communicate material risks without being the primary subject matter expert for every framework.
Demonstrated experience working directly with senior Legal, Compliance, cybersecurity, technology, and business executives.
Strong executive communication and presentation skills, including communicating difficult findings, defending recommendations, and facilitating decisions.
Experience navigating challenging stakeholder interactions, competing organizational priorities, and high-pressure regulatory or assessment environments.
Strong leadership, organizational, analytical, negotiation, and problem-solving capabilities.
Ability to independently establish priorities, manage ambiguity, and drive issues through resolution.
Ability to work effectively with globally distributed teams across European and North American time zones.

Nice To Haves

Master's degree in Cybersecurity, Information Security, Risk Management, Business Administration (MBA), or a related discipline.
Familiarity with NIS2, TISAX, ISO 27001, applicable GDPR cybersecurity requirements, and other international regulatory frameworks.
Experience leading cybersecurity compliance programs in defense contracting, automotive, aerospace, manufacturing, or similarly regulated multinational organizations.
Experience coordinating CMMC assessments, third-party certification activities, government security reviews, or major customer cybersecurity assessments.
Familiarity with NIST CSF, NIST SP 800-53, and common control frameworks.
Experience managing multiple regulatory program owners and subject matter experts across business functions and geographies.
Experience implementing or improving enterprise GRC platforms, compliance reporting, automated evidence collection, or continuous control monitoring.
Experience supporting cybersecurity compliance transformation, operating-model improvements, or integration of compliance programs across business organizations.
Relevant professional certifications such as CISSP, CISM, CISA, CRISC, or comparable credentials.

Responsibilities

Lead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio in coordination with designated regulatory and framework program owners.
Establish and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and key deliverables.
Oversee compliance program execution and align priorities, schedules, responsibilities, and reporting expectations across the organization.
Identify interdependencies, resource constraints, competing priorities, and obstacles that may affect compliance commitments.
Promote consistency in program planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.
Maintain consolidated visibility into compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.
Support development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, including reuse of control evidence across regulatory programs.
Establish ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.
Drive accountability across business, technology, and compliance stakeholders, including those outside the role's direct reporting authority.
Manage overdue commitments, unresolved dependencies, and competing priorities; work with program owners and responsible teams on realistic, risk-informed remediation plans.
Challenge incomplete remediation plans, unsupported conclusions, and commitments that do not adequately address compliance risks.
Escalate compliance issues through appropriate governance channels when ownership, priorities, or remediation progress cannot be resolved operationally.
Oversee validation of remediation closure and confirm that supporting evidence and acceptance criteria are satisfied.
Identify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.
Oversee cybersecurity regulatory intelligence, including horizon scanning, emerging requirements, applicability assessments, and regulatory change tracking.
Maintain a centralized register of applicable cybersecurity regulatory, contractual, and customer obligations.
Coordinate with Legal, Compliance, Privacy, and subject matter experts to confirm regulatory applicability, interpretation, and ownership.
Ensure new or changing requirements are incorporated into compliance roadmaps, control frameworks, assessment activities, and remediation priorities.
Identify overlapping obligations and opportunities to streamline compliance across frameworks; provide leadership visibility into developments, impacts, and required actions.
Lead enterprise coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.
Establish consistent assessment planning and readiness expectations; coordinate schedules, evidence requirements, accountable stakeholders, milestones, and escalation procedures.
Work with framework specialists and control owners to ensure evidence is complete, current, validated, and assessment-ready.
Serve as a senior coordination and escalation point for assessment challenges, unresolved dependencies, and material findings; ensure results feed into accountable remediation plans.
Drive lessons learned and improvements in assessment preparation, evidence management, and control validation.
Represent Enterprise GRC independently in cross-functional discussions with senior cybersecurity, technology, Legal, Compliance, and business leaders.
Provide concise, decision-oriented reporting on program status, material risks, milestones, and remediation progress to the Director, Enterprise GRC, CISO, and other senior executives.
Lead complex discussions involving organizational priorities, regulatory concerns, assessment findings, and remediation expectations; clarify responsibilities, challenge assumptions, address disagreements, and establish follow-up actions.
Build productive senior stakeholder relationships while maintaining clear accountability and execution expectations.
Exercise delegated authority to coordinate compliance execution, resolve operational impediments, and escalate matters requiring executive intervention.
Lead, coach, and develop assigned cybersecurity compliance analysts and team members; set performance expectations, priorities, and accountability for deliverables.
Oversee team workload, assessment coordination, reporting activities, and remediation tracking.
Develop consistent practices for compliance planning, issue management, evidence validation, regulatory tracking, and executive reporting.
Foster collaboration among framework owners, technical control owners, cybersecurity teams, and business organizations.
Promote continuous improvement through process standardization, automation, and effective use of enterprise GRC platforms; build a team culture of ownership, professionalism, sound judgment, and constructive stakeholder engagement.

Benefits

Private health care effective day 1 of employment
Life and accident insurance
Paid Time Off, including holidays, vacation, designated time off, and parental leave
Relocation assistance may be available
Learning and development opportunities
Discount programs with various manufacturers and retailers
Recognition for innovation and excellence
Opportunities to give back to the community
Tuition Reimbursement
Competitive benefits package supporting family, physical health, and mental health