Lead Governance Risk Consultant

CDW; Chicago (IL); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health, dental, vision

Employee stock purchase plan

Tuition reimbursement

Paid vacation & sick leave

Job summary

CDW, a Fortune 500 technology solutions provider, seeks a Security Risk Management Lead in Chicago, IL to streamline, automate and scale security compliance across global units.

You will drive government compliance strategies, oversee vendor security controls and perform M&A due diligence to mitigate risk in potential targets, while advancing governance and regulatory programs.

Qualifications

• Bachelor's degree in a related field preferred.
• 10+ years in a senior security/compliance role.
• Experience with government compliance (CMMC, CUI, ITAR) and cloud platforms.

Responsibilities

• Define and drive the government compliance strategy (Feds, state, local, K-12).
• Oversee vendor security assessments and GCC High/CMMC alignment.
• Lead M&A security due diligence and integration from a security perspective.

Skills

Security governance

Risk assessment

CMMC knowledge

Azure Cloud

Regulatory compliance

M&A due diligence

Vendor management

Project management

Education

Bachelor's degree

Tools

GCC-High

Job description

What you will do:

Your role at CDW is of the utmost importance to the company's mission, objectives, and reputation. As the Security Risk Management Lead, you will streamline, automate, and scale security compliance programs across CDW's growing global business units. Your responsibilities include two areas of focus:

Government Compliance – Oversee and drive CDW's compliance strategy covering Federal, State and Local Government, and K-12 Education. You will work closely with cross-functional teams to develop and execute strategies, policies, and procedures to ensure our organization meets the required security standards and regulations. The ideal candidate has a deep understanding of CMMC, CUI, and ITAR requirements and possesses strong technical and project management skills. Responsibilities include:

• Compliance Strategy: Define the compliance strategy for maintaining compliance with CMMC, CUI, ITAR, and other government-centric requirements. Collaborate with stakeholders to drive execution and manage timelines effectively to include alignment with current and planned business process and technology transformations.
• Vendor Management: Evaluate and assess third-party vendors' security controls and compliance with GCC High and CMMC requirements. Provide recommendations and support vendor selection processes.

Mergers and Acquisitions Due Diligence – In this capacity you will be responsible for assessing the security posture and risks associated with potential merger or acquisition targets. You will work closely with cross-functional teams to evaluate the target's security controls, policies, and procedures, and provide recommendations to mitigate identified risks. This includes overseeing M&A integration activities from a security standpoint. The ideal candidate has a strong background in information security, risk assessment, and due diligence processes.

In addition, you will support streamline, automate, and scale security compliance programs across CDW's growing global business units, and perform other governance, risk management and compliance duties as needed.

What we expect from you:

• Bachelor's degree in computer science, Information Systems, or a related field. Relevant certifications (e.g., CISSP, CISM, CISA) are highly desirable.
• 10+ years in a senior security compliance or information security role.
• We value experience, skills, drive, aptitude, and attitude over university degrees and certifications.
• Experience in the cloud computing industry and familiarity with Microsoft Azure or other similar cloud platforms is a plus.
• Strong understanding of security compliance frameworks and regulatory requirements (e.g., NIST, ISO, SOC2, GDPR).
• Specific experience in conducting security evaluations for mergers and acquisitions.
• Experience in the legal and contractual aspects of mergers and acquisitions, including reviewing security-related provisions and SLAs, is a plus.
• Knowledge of and experience with GCC-High and CMMC, highly desirable.

What you can expect from us:

• Diverse, award-winning culture and work/life benefits.
• An inclusive culture that empowers you to bring your best true self and your best ideas. We know diverse perspectives lead to better problem solving and better solutions for our customers.
• A learning environment that empowers you to develop your career with comprehensive resources and support, ongoing education and skills-development training, and robust advancement opportunities.
• Health, dental, and vision coverage; coworker stock purchase program; paid vacation time and sick days; tuition reimbursement; coworker discounts; and other generous perks.

Who we are:

We make technology work so people can do great things. CDW is a Fortune 500 technology solutions provider to business, government, education, and healthcare organizations in the United States, Canada, and the United Kingdom. We help customers navigate and be successful in an ever-changing world by providing them with the technology advice and solutions they need-when, where, and how they need them.

CDW is an equal opportunity employer committed to a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.