Manager, Risk, Compliance and Governance

Altria; Richmond (VA); Hybrid; USD 120,000 - 173,000; Full time

Benefits offered by this job

Hybrid schedule

PTO 15 days

13 holidays

Floating holidays

37.5-hour workweek

401(k) matching

Professional development stipends

Parental leave

Job summary

Altria is seeking a Manager, Risk, Compliance and Governance to strengthen technology risk and compliance within our Enterprise Technology organization. Based in Richmond, VA with a hybrid schedule and relocation benefits.

You will collaborate with IT risk, Audit, and control owners to advance IT compliance, manage disaster recovery governance, and ensure controls across AI, PII, SOX, PCI, and HIPAA. Strong NIST knowledge and POA&M experience are required.

Qualifications

• Bachelor's degree in IT or equivalent experience.
• 8+ years IT experience in security controls, assessments, auditing or architecture.
• Proficiency with IT security controls and compliance frameworks.
• Hands-on knowledge of NIST guidelines (800-series, 160).
• Experience with POA&M, vulnerability management and risk management.
• Familiarity with SOX, SEC, HIPAA, PCI DSS testing for information systems.

Responsibilities

• Build, update, and implement controls across domains (AI, PII, SOX, PCI, HIPAA).
• Assess compliance frameworks to align risk management with business strategy.
• Maintain disaster recovery governance and documentation.
• Validate business impact assessments for applications and resiliency.
• Conduct technical control, compliance, and resiliency assessments.
• Develop dashboards, standards, and guidelines for portfolio delivery.
• Support remediation with Corporate Audit and audit liaison functions.

Skills

Security controls

Security assessments

Auditing & compliance

Regulatory frameworks

POA&M management

NIST guidelines

Education

Bachelor's degree in IT or related field

Tools

NIST 800-series guidelines

Job description

Are you passionate about strengthening technology risk and compliance while helping a business move forward with confidence? Join our Enterprise Technology organization and help shape how we manage cybersecurity risk, strengthen compliance, and build resilient technology practices across the enterprise. This position is in Richmond, VA with a hybrid work schedule. Relocation benefits will be provided.

As Manager, Risk, Compliance and Governance, you’ll serve on the cybersecurity team, coordinating closely with Business Information Security Officers, IT Risk Management, Corporate Audit, and technology control owners. You’ll play a substantial role in advancing IT compliance strategies. You will support SOX and other regulatory controls. You will strengthen oversight of disaster recovery processes and help ensure our technology environment meets evolving security and compliance expectations.

What you will be doing:

• Partnering with control owners to build, update, and implement controls across applicable domains, including AI, PII, SOX, PCI, and HIPAA.
• Assessing compliance frameworks and strategies to align digital risk management and regulatory oversight practices with the company’s business strategy.
• Establishing and maintaining disaster recovery governance, including the completeness and accuracy of disaster recovery plans, procedures, and supporting documentation.
• Validating business impact assessments for applications across the Altria environment and supporting technology resiliency and disaster recovery preparedness.
• Conducting technical control, compliance, and resiliency assessments to evaluate the effectiveness of controls designed to protect systems and data.
• Building and leading all aspects of compliance and control metrics, dashboards, standards, patterns, and guidelines that support portfolio delivery and provide significant insights to senior leaders.
• Partnering with Corporate Audit and audit liaison functions to support remediation of internal and external audit management action plans and minimize findings.

We want you to have:

• Bachelor’s degree in an IT-related field or equivalent relevant experience.
• 8+ years of information technology experience specializing in security control selection and validation, security assessments, system accreditation, auditing, or technology architecture.
• Demonstrated proficiency with current IT technologies and their application within security, risk, and compliance environments.
• Hands-on knowledge of NIST 800-series guidelines, including the Developing Cyber-Resilient Systems (NIST SP 800-160) and NIST Cyber Security Framework 2.0.
• Experience with Plan of Action and Milestones (POA&M), vulnerability and patch management, and risk management.
• Knowledge of industry-specific compliance standards, including Sarbanes-Oxley (SOX), SEC, HIPAA, and PCI DSS requirements, as they relate to information systems and associated control testing.

The starting salary is based on but not limited to experience, knowledge, and qualifications in determining compensation decisions. The Salary Range for this position is: $119,600.00 - $173,450.00.

Why You’ll Love Building Your Career at Altria

At Altria, we believe a great career starts with feeling supported — both at work and in life. Here’s what you’ll find here:

• Work where connection and flexibility meet — enjoy the benefits of in-person collaboration three days a week (Tuesday - Thursday), while maintaining the flexibility to work remotely on Mondays and Fridays. Our hybrid approach empowers you to stay connected, collaborate with colleagues, and manage your schedule in a way that works best for you.
• Own your time — start with 15 days of paid time off, 13 paid holidays, 2 floating holiday days, and a 37.5-hour workweek so you can recharge and live fully.
• A place where you belong — where your ideas are welcomed, your growth is encouraged, and your impact is real.
• Get recognized for your work — annual merit increases and performance bonus.
• A future you can count on — 401(k) matching from day one; plus Deferred Profit Sharing, an annual company contribution in an amount equal to 13%–17% of your base salary.
• Help with your goals — get help with student loan repayment assistance, attend a conference, or gain a new certification with professional development stipends.
• Support for what matters most — comprehensive medical, dental, and vision coverage for you and your family.
• Celebrating your milestones — paid parental and bonding leave for life’s biggest moments.
• Wellness that goes beyond work — programs that care for your whole well-being at whatever stage you are in your life.
• A culture that gives back — paid volunteer days and a shared commitment to making a difference.

At Altria, we offer more than benefits — we offer a career that fits your life, rewards your ambition, and celebrates your impact.

This position is not eligible for sponsorship.