Senior Manager, Enterprise Cybersecurity Compliance
Aptiv · Troy
Role Summary
Aptiv is seeking an experienced Senior Manager, Enterprise Cybersecurity Compliance to lead the execution and coordination of its global cybersecurity compliance portfolio. This is a highly visible leadership position requiring strong program management capabilities, sound judgment, executive presence, and the ability to drive accountability across a complex, multinational organization.
Reporting to the Director, Enterprise GRC, this individual will oversee integrated compliance planning, assessment readiness, regulatory obligations, remediation commitments, and executive reporting across Aptiv's cybersecurity compliance programs. These include CMMC, NIS2, TISAX, FedRAMP, ISO 27001, applicable security requirements under GDPR, and customer and contractual cybersecurity obligations.
The Senior Manager will work closely with designated framework owners, regulatory specialists, Legal, Compliance, cybersecurity teams, and business leaders to ensure compliance activities are effectively coordinated and commitments are delivered. The position does not require deep expertise in every regulatory framework but does require sufficient cybersecurity and compliance knowledge to evaluate progress, challenge assumptions, identify risks, and drive effective outcomes.
This individual must be comfortable operating independently in demanding environments, including situations involving competing business priorities, regulatory pressures, and challenging senior stakeholder interactions. The successful candidate will demonstrate the confidence and professional maturity to lead difficult discussions, establish clear expectations, resolve ambiguity, and hold stakeholders accountable for agreed commitments.
The position will serve as a key U.S.-based leader within Enterprise GRC, representing the function in cross-functional and executive discussions and working closely with the CISO and senior cybersecurity leadership.
Your Role
Enterprise Compliance Portfolio Leadership
- Lead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio, coordinating activities across designated regulatory and framework program owners.
- Establish and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and key deliverables.
- Provide consistent oversight of compliance program execution, ensuring priorities, schedules, responsibilities, and reporting expectations are aligned across the organization.
- Identify interdependencies, resource constraints, competing priorities, and other obstacles that could affect compliance commitments.
- Drive consistency in program planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.
- Maintain consolidated visibility into compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.
- Support development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, improving consistency, efficiency, and reuse of control evidence across regulatory programs.
Accountability and Remediation Oversight
- Establish clear ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.
- Drive accountability across business, technology, and compliance stakeholders, including individuals and teams outside the position's direct reporting authority.
- Actively manage overdue commitments, unresolved dependencies, and competing priorities to maintain progress toward compliance objectives.
- Work with program owners and responsible technical or business teams to establish realistic, risk-informed remediation plans.
- Challenge incomplete remediation plans, unsupported conclusions, and commitments that do not adequately address identified compliance risks.
- Ensure compliance issues are escalated through appropriate governance channels when ownership, priorities, or remediation progress cannot be resolved at the operational level.
- Oversee validation of remediation closure, ensuring appropriate evidence is available and established acceptance criteria have been satisfied.
- Identify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.
Regulatory Intelligence and Obligations Management
- Oversee the enterprise cybersecurity regulatory intelligence process, including horizon scanning, emerging requirements, applicability assessments, and regulatory change tracking.
- Maintain a centralized register of applicable cybersecurity regulatory, contractual, and customer obligations.
- Coordinate with Legal, Compliance, Privacy, and designated subject matter experts to confirm regulatory applicability, interpretation, and ownership.
- Ensure new or changing requirements are incorporated into compliance roadmaps, control frameworks, assessment activities, and remediation priorities.
- Identify overlapping obligations and opportunities to streamline compliance activities across multiple frameworks.
- Provide leadership with visibility into emerging regulatory developments, potential business impacts, and required organizational actions.
Assessment and Audit Coordination
- Lead enterprise coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.
- Establish consistent assessment planning and readiness expectations across designated framework owners and participating organizations.
- Coordinate assessment schedules, evidence requirements, accountable stakeholders, milestones, and escalation procedures.
- Work with framework specialists and control owners to ensure evidence is complete, current, validated, and ready for assessment.
- Serve as a senior coordination and escalation point for assessment-related challenges, unresolved dependencies, and material findings.
- Track assessment results and ensure findings are incorporated into accountable remediation plans.
- Drive lessons learned and improvements in assessment preparation, evidence management, and control validation.
Executive Engagement and Organizational Influence
- Independently represent Enterprise GRC in cross-functional discussions involving senior cybersecurity, technology, Legal, Compliance, and business leadership.
- Provide concise, decision-oriented reporting on compliance program status, material risks, milestones, and remediation progress to the Director, Enterprise GRC, CISO, and other senior executives.
- Lead complex discussions involving competing organizational priorities, regulatory concerns, assessment findings, and remediation expectations.
- Exercise sound judgment and professional confidence when challenging assumptions, clarifying responsibilities, and addressing disagreements.
- Build productive relationships with senior stakeholders while maintaining clear expectations for accountability and execution.
- Establish clear decisions, accountable owners, milestones, and follow-up actions from significant compliance discussions.
- Exercise delegated authority to coordinate compliance execution, resolve operational impediments, and escalate matters requiring executive intervention.
- Serve as a trusted U.S.-based leadership representative of Enterprise GRC, capable of managing significant compliance matters independently within established authority.
Team Leadership and Operational Excellence
- Lead, coach, and develop assigned cybersecurity compliance analysts and team members.
- Establish clear performance expectations, priorities, and accountability for compliance deliverables.
- Oversee team workload, assessment coordination, reporting activities, and remediation tracking.
- Develop consistent practices for compliance planning, issue management, evidence validation, regulatory tracking, and executive reporting.
- Foster effective collaboration across framework owners, technical control owners, cybersecurity teams, and business organizations.
- Promote continuous improvement in compliance execution through process standardization, automation, and effective use of enterprise GRC platforms.
- Build a team culture characterized by ownership, professionalism, sound judgment, and constructive engagement with stakeholders.
Your Background
- Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Risk Management, Business, or a related discipline, or equivalent professional experience.
- Direct experience with CMMC Level 2, NIST SP 800-171, FedRAMP, or comparable U.S. government cybersecurity compliance requirements.
- Significant progressive experience in cybersecurity governance, risk management, regulatory compliance, or enterprise cybersecurity program leadership.
- Demonstrated experience managing complex, multi-framework cybersecurity compliance programs within a large or geographically distributed organization.
- Proven ability to drive accountability and deliver results across matrixed organizations, including stakeholders outside direct reporting authority.
- Experience leading and developing compliance analysts, GRC professionals, or comparable teams.
- Experience coordinating regulatory assessments, independent audits, customer security reviews, and associated remediation programs.
- Strong foundational knowledge of cybersecurity governance, risk management, and recognized control frameworks.
- Ability to evaluate compliance program performance, identify gaps, challenge remediation plans, and communicate material risks without serving as the primary subject matter expert for every applicable framework.
- Demonstrated experience working directly with senior Legal, Compliance, cybersecurity, technology, and business executives.
- Strong executive communication and presentation skills, including the ability to communicate difficult findings, defend recommendations, and facilitate decisions.
- Experience navigating challenging stakeholder interactions, competing organizational priorities, and high-pressure regulatory or assessment environments.
- Strong leadership, organizational, analytical, negotiation, and problem-solving capabilities.
- Demonstrated ability to independently establish priorities, manage ambiguity, and drive issues through resolution.
- Ability to work effectively with globally distributed teams across European and North American time zones.
Preferred Qualifications
- Master's degree in Cybersecurity, Information Security, Risk Management, Business Administration (MBA), or a related discipline.
- Familiarity with NIS2, TISAX, ISO 27001, applicable GDPR cybersecurity requirements, and other international regulatory frameworks.
- Experience leading cybersecurity compliance programs in defense contracting, automotive, aerospace, manufacturing, or similarly regulated multinational organizations.
- Experience coordinating CMMC assessments, third-party certification activities, government security reviews, or major customer cybersecurity assessments.
- Familiarity with NIST CSF, NIST SP 800-53, and common control frameworks.
- Experience managing multiple regulatory program owners and subject matter experts across different business functions and geographies.
- Experience implementing or improving enterprise GRC platforms, compliance reporting, automated evidence collection, or continuous control monitoring.
- Experience supporting cybersecurity compliance transformation, operating-model improvements, or integration of compliance programs across business organizations.
- Relevant professional certifications such as CISSP, CISM, CISA, CRISC, or comparable credentials.
Why join Aptiv ?
· You grow at Aptiv. Aptiv's winning culture is global by design. We bring together diverse perspectives, cultures, and business contexts to solve our customers' toughest challenges. In this environment, every individual can grow, lead, and make an impact, regardless of background, because inclusion fuels how we innovate and win.
· You make an impact at Aptiv. One of the strengths of humanity is our drive to progress, to improve, to achieve more tomorrow than we did yesterday. People need solutions they can trust when it matters most. At Aptiv, you are building those solutions every day.
· You have support at Aptiv. We ensure you have the resources and support you need to take care of your family, your physical health, and your mental health with a competitive benefits package
Your Benefits at Aptiv:
· Private health care effective day 1 of employment
· Life and accident insurance
· Paid Time Off (Holidays, Vacation, Designated time off, Parental leave)
· Relocation assistance may be available
· Learning and development opportunities
· Discount programs with various manufacturers and retailers
· Recognition for innovation and excellence
· Opportunities to give back to the community
· Tuition Reimbursement
Meet the Next Generation Aptiv
At Aptiv, we deliver innovative solutions that people trust when it matters most.
Progress is never static. It is about reaching further, exploring new possibilities, and enabling mobility. Aptiv empowers customers to create solutions people rely on—advancing safety and autonomy in Automotive and Commercial Vehicles, enabling mission-critical performance in Aerospace & Defense, and powering intelligent systems across Energy, Enterprise, and Telecommunications. We also drive precision and efficiency in Industrials & Robotics and support life-critical innovation in Medical technologies.
Guided by our winning culture and values to Think & Act Like Owners, as One Team, and Play to Win, we turn commitment into results and achieve more together.
Join Us to Deliver Innovative Solutions That People Trust!
Aptiv is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, gender identity, sexual orientation, disability status, protected veteran status or any other characteristic protected by law.