Senior Manager, Enterprise Cybersecurity Compliance

• Lead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio, coordinating activities across designated regulatory and framework program owners.

• Establish and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and key deliverables.

• Provide consistent oversight of compliance program execution, ensuring priorities, schedules, responsibilities, and reporting expectations are aligned across the organization.

• Identify interdependencies, resource constraints, competing priorities, and other obstacles that could affect compliance commitments.

• Drive consistency in program planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.

• Maintain consolidated visibility into compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.

• Support development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, improving consistency, efficiency, and reuse of control evidence across regulatory programs.

• Support development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, improving consistency, efficiency, and reuse of control evidence across regulatory programs.

• Establish clear ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.

• Drive accountability across business, technology, and compliance stakeholders, including individuals and teams outside the position's direct reporting authority.

• Actively manage overdue commitments, unresolved dependencies, and competing priorities to maintain progress toward compliance objectives.

• Work with program owners and responsible technical or business teams to establish realistic, risk-informed remediation plans.

• Challenge incomplete remediation plans, unsupported conclusions, and commitments that do not adequately address identified compliance risks.

• Ensure compliance issues are escalated through appropriate governance channels when ownership, priorities, or remediation progress cannot be resolved at the operational level.

• Oversee validation of remediation closure, ensuring appropriate evidence is available and established acceptance criteria have been satisfied.

• Identify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.

• Identify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.

• Oversee the enterprise cybersecurity regulatory intelligence process, including horizon scanning, emerging requirements, applicability assessments, and regulatory change tracking.

• Maintain a centralized register of applicable cybersecurity regulatory, contractual, and customer obligations.

• Coordinate with Legal, Compliance, Privacy, and designated subject matter experts to confirm regulatory applicability, interpretation, and ownership.

• Ensure new or changing requirements are incorporated into compliance roadmaps, control frameworks, assessment activities, and remediation priorities.

• Identify overlapping obligations and opportunities to streamline compliance activities across multiple frameworks.

• Provide leadership with visibility into emerging regulatory developments, potential business impacts, and required organizational actions.

• Provide leadership with visibility into emerging regulatory developments, potential business impacts, and required organizational actions.

• Lead enterprise coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.

• Establish consistent assessment planning and readiness expectations across designated framework owners and participating organizations.

• Coordinate assessment schedules, evidence requirements, accountable stakeholders, milestones, and escalation procedures.

• Work with framework specialists and control owners to ensure evidence is complete, current, validated, and ready for assessment.

• Serve as a senior coordination and escalation point for assessment-related challenges, unresolved dependencies, and material findings.

• Track assessment results and ensure findings are incorporated into accountable remediation plans.

• Drive lessons learned and improvements in assessment preparation, evidence management, and control validation.

• Drive lessons learned and improvements in assessment preparation, evidence management, and control validation.

• Independently represent Enterprise GRC in cross-functional discussions involving senior cybersecurity, technology, Legal, Compliance, and business leadership.

• Provide concise, decision-oriented reporting on compliance program status, material risks, milestones, and remediation progress to the Director, Enterprise GRC, CISO, and other senior executives.

• Lead complex discussions involving competing organizational priorities, regulatory concerns, assessment findings, and remediation expectations.

• Exercise sound judgment and professional confidence when challenging assumptions, clarifying responsibilities, and addressing disagreements.

• Build productive relationships with senior stakeholders while maintaining clear expectations for accountability and execution.

• Establish clear decisions, accountable owners, milestones, and follow-up actions from significant compliance discussions.

• Exercise delegated authority to coordinate compliance execution, resolve operational impediments, and escalate matters requiring executive intervention.

• Serve as a trusted U.S.-based leadership representative of Enterprise GRC, capable of managing significant compliance matters independently within established authority.

• Serve as a trusted U.S.-based leadership representative of Enterprise GRC, capable of managing significant compliance matters independently within established authority.

• Lead, coach, and develop assigned cybersecurity compliance analysts and team members.

• Establish clear performance expectations, priorities, and accountability for compliance deliverables.

• Oversee team workload, assessment coordination, reporting activities, and remediation tracking.

• Develop consistent practices for compliance planning, issue management, evidence validation, regulatory tracking, and executive reporting.

• Foster effective collaboration across framework owners, technical control owners, cybersecurity teams, and business organizations.

• Promote continuous improvement in compliance execution through process standardization, automation, and effective use of enterprise GRC platforms.

• Build a team culture characterized by ownership, professionalism, sound judgment, and constructive engagement with stakeholders.

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related discipline, or equivalent professional experience.

• Direct experience with CMMC Level 2, NIST SP 800-171, FedRAMP, or comparable U.S. government cybersecurity compliance requirements.

• Significant progressive experience in cybersecurity governance, risk management, regulatory compliance, or enterprise cybersecurity program leadership.

• Demonstrated experience managing complex, multi-framework cybersecurity compliance programs within a large or geographically distributed organization.

• Proven ability to drive accountability and deliver results across matrixed organizations, including stakeholders outside direct reporting authority.

• Experience leading and developing compliance analysts, GRC professionals, or comparable teams.

• Experience coordinating regulatory assessments, independent audits, customer security reviews, and associated remediation programs.

• Strong foundational knowledge of cybersecurity governance, risk management, and recognized control frameworks.

• Ability to evaluate compliance program performance, identify gaps, challenge remediation plans, and communicate material risks without serving as the primary subject matter expert for every applicable framework.

• Demonstrated experience working directly with senior Legal, Compliance, cybersecurity, technology, and business executives.

• Strong executive communication and presentation skills, including the ability to communicate difficult findings, defend recommendations, and facilitate decisions.

• Experience navigating challenging stakeholder interactions, competing organizational priorities, and high-pressure regulatory or assessment environments.

• Strong leadership, organizational, analytical, negotiation, and problem-solving capabilities.

• Demonstrated ability to independently establish priorities, manage ambiguity, and drive issues through resolution.

• Ability to work effectively with globally distributed teams across European and North American time zones.

• Ability to work effectively with globally distributed teams across European and North American time zones.

• Master's degree in Cybersecurity, Information Security, Risk Management, Business Administration (MBA), or a related discipline.

• Familiarity with NIS2, TISAX, ISO 27001, applicable GDPR cybersecurity requirements, and other international regulatory frameworks.

• Experience leading cybersecurity compliance programs in defense contracting, automotive, aerospace, manufacturing, or similarly regulated multinational organizations.

• Experience coordinating CMMC assessments, third-party certification activities, government security reviews, or major customer cybersecurity assessments.

• Familiarity with NIST CSF, NIST SP 800-53, and common control frameworks.

• Experience managing multiple regulatory program owners and subject matter experts across different business functions and geographies.

• Experience implementing or improving enterprise GRC platforms, compliance reporting, automated evidence collection, or continuous control monitoring.

• Experience supporting cybersecurity compliance transformation, operating-model improvements, or integration of compliance programs across business organizations.

• Relevant professional certifications such as CISSP, CISM, CISA, CRISC, or comparable credentials.