Senior GRC Manager - ISO27001, CMMC & AI Governance

VIAVI Solutions Inc.; Chandler (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

VIAVI Solutions Inc. in Chandler is seeking a senior Manager of Governance, Risk & Compliance to lead this critical function.

The role combines hands-on risk assessments, policy development and control validation with leadership of the GRC program across security engineering, IT, legal and privacy teams. The successful candidate will drive ISO 27001 and CMMC readiness, define AI governance practices, and ensure audits and risk reporting align with executive expectations.

Qualifications

• 10+ years of progressive experience in cybersecurity, information security governance, risk management, compliance, audit or security assurance.
• Experience leading or contributing to major cybersecurity compliance, audit or assurance programs.
• Strong ability to translate regulatory and contractual requirements into practical security controls.
• Experience implementing and maintaining tools like Vanta, Drata, Sprinto.

Responsibilities

• Lead information security governance across VIAVI to mature risk-based programs.
• Direct cybersecurity risk management, assessments and reporting to executives.
• Oversee ISO 27001 and CMMC readiness, control ownership and evidence management.
• Establish AI governance and risk management processes for responsible AI use.
• Coordinate compliance, assurance activities and audits with cross-functional teams.
• Mentor and develop GRC staff while building scalable governance processes.

Skills

Cybersecurity governance

Risk management

Policy development

Regulatory compliance

Audits & assurance

AI governance

Vendor risk management

ISO 27001 / CMMC

NIST/SEC frameworks

Leadership

Communication

Tools

Vanta

Drata

Sprinto

Job description

VIAVI Solutions Inc. in Chandler is seeking a senior Manager of Governance, Risk & Compliance to lead this critical function.

The role combines hands-on risk assessments, policy development and control validation with leadership of the GRC program across security engineering, IT, legal and privacy teams. The successful candidate will drive ISO 27001 and CMMC readiness, define AI governance practices, and ensure audits and risk reporting align with executive expectations.