Senior Security Manager, Audit and Compliance

BAE Systems•Manchester, NH

6d•$134,640 - $228,888•Hybrid

About The Position

The SAV Audit & Compliance Specialist leads BAE Systems’ independent security assurance and compliance program across unclassified, collateral, and special access environments. Reporting directly to the Director of Security, Assessments & Investigations, the role provides objective oversight of security compliance, audit readiness, risk management, and continuous improvement. It operates independently from mission-support security functions and advises executive leadership on organizational security posture, regulatory compliance, and inspection readiness. The role supervises security auditors, compliance specialists, and risk management professionals; develops audit methodologies and risk-based assessment strategies; validates inspections and assessments; and prepares the organization for government and program sponsor reviews. It also monitors regulatory changes, evaluates security controls and facility compliance, develops metrics and executive reports, leads corrective and preventive actions, and supports policy, governance, training, and awareness initiatives. This is a hybrid role, with time split between onsite and remote work. The position may require responding to off-hours emergencies and local or overnight emergency or planned travel as needed.

Requirements

High school diploma or equivalent, with at least 8 years in a like background.
Active U.S. Secret Clearance and ability to obtain TS/SCI.
Interpersonal, organizational, written, and verbal communication skills.
Demonstrated success leading enterprise-level audit, compliance, inspection, or assessment programs and supporting government inspections.
Strong knowledge of NISPOM 32 CFR Part 117, CUI requirements, DAAG, ICDs, DO Manuals, DoD security regulations, CMMC 2.0, NIST frameworks, risk management principles, and audit methodologies.
Familiarity with security management software such as SIMS and government databases such as DISS.
Knowledge of business software, including Excel, Word, PowerPoint, and Office.
Ability to respond to off-hours emergencies and undertake local or overnight emergency or planned travel as needed.

Nice To Haves

Bachelor’s degree.
Experience with SAP, SCI, and compartmented security programs.
Experience managing DCSA Security Vulnerability Assessments and other government oversight activities.
Experience implementing governance, risk, and compliance tools and leading enterprise continuous improvement initiatives.
Professional certifications such as CISA, CISSP, CISM, CompTIA Security+, CRISC, Certified CMMC Assessor, ISO 19011 Lead Auditor, or related security and compliance credentials.

Responsibilities

Supervise a team of security auditors, compliance specialists, and risk management professionals.
Develop and implement audit methodologies, compliance monitoring processes, and risk-based assessment strategies.
Validate self-inspections, government security reviews, compliance assessments, CMMC evaluations, and CORA readiness activities.
Prepare the organization for DCSA, Department of War, Intelligence Community, and program sponsor-led inspections and assessments.
Monitor changes to government security regulations and advise leadership on compliance requirements and associated risks.
Evaluate security controls, classified facility compliance, access control procedures, safeguarding practices, and physical security requirements.
Develop compliance metrics, dashboards, and executive reports to measure program effectiveness and identify trends.
Lead corrective and preventive action initiatives and continuous improvement efforts to strengthen security performance and reduce risk.
Partner with AMS leadership, government representatives, and oversight organizations to ensure effective remediation and long-term compliance.
Support policy development, governance initiatives, workforce training, and organizational awareness programs that promote compliance and accountability.