Senior Manager, Enterprise Cybersecurity Compliance

APTIV INDIA; United States; On-site; USD 180,000 - 230,000; Full time

Job summary

Aptiv is seeking an experienced Senior Manager for Enterprise Cybersecurity Compliance to lead the execution and coordination of its global cybersecurity compliance program. The role requires strong program management, executive presence, and accountability across a multinational organization.

Reporting to the Director of Enterprise GRC, this leader will oversee regulatory obligations, remediation commitments, and milestone delivery across frameworks such as CMMC, NIS2, TISAX, FedRAMP, ISO

Responsibilities

• Lead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio across multiple regulatory programs.
• Coordinate governance, assessment readiness, and remediation activities with owners and stakeholders.
• Provide executive reporting and track progress against commitments across the organization.

Job description

Role Summary

Aptiv is seeking an experienced Senior Manager, Enterprise Cybersecurity Compliance to lead the execution and coordination of its global cybersecurity compliance portfolio. This is a highly visible leadership position requiring strong program management capabilities, sound judgment, executive presence, and the ability to drive accountability across a complex, multinational organization.

Reporting to the Director, Enterprise GRC, this individual will oversee integrated compliance planning, assessment readiness, regulatory obligations, remediation commitments, and executive reporting across Aptiv's cybersecurity compliance programs. These include CMMC, NIS2, TISAX, FedRAMP, ISO 27001, applicable security requirements under GDPR, and customer and contractual cybersecurity obligations.

The Senior Manager will work closely with designated framework owners, regulatory specialists, Legal, Compliance, cybersecurity teams, and business leaders to ensure compliance activities are effectively coordinated and commitments are delivered. The position does not require deep expertise in every regulatory framework but does require sufficient cybersecurity and compliance knowledge to evaluate progress, challenge assumptions, identify risks, and drive effective outcomes.

This individual must be comfortable operating independently in demanding environments, including situations involving competing business priorities, regulatory pressures, and challenging senior stakeholder interactions. The successful candidate will demonstrate the confidence and professional maturity to lead difficult discussions, establish clear expectations, resolve ambiguity, and hold stakeholders accountable for agreed commitments.

The position will serve as a key U.S.-based leader within Enterprise GRC, representing the function in cross-functional and executive discussions and working closely with the CISO and senior cybersecurity leadership.

Your Role

Enterprise Compliance Portfolio Leadership

• Lead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio, coordinating activities across designated regulatory and framework program owners.
• Establish and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and key deliverables.
• Provide consistent oversight of compliance program execution, ensuring priorities, schedules, responsibilities, and reporting expectations are aligned across the organization.
• Identify interdependencies, resource constraints, competing priorities, and other obstacles that could affect compliance commitments.
• Drive consistency in program planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.
• Maintain consolidated visibility into compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.
• Support development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, improving consistency, efficiency, and reuse of control evidence across regulatory programs.

Accountability and Remediation Oversight

• Establish clear ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.
• Drive accountability across business, technology, and compliance stakeholders, including individuals and teams outside the position's direct reporting authority.
• Actively manage overdue commitments, unresolved dependencies, and competing priorities to maintain progress toward compliance objectives.
• Work with program owners and responsible technical or business teams to establish realistic, risk-informed remediation plans.
• Challenge incomplete remediation plans, unsupported conclusions, and commitments that do not adequately address identified compliance risks.
• Ensure compliance issues are escalated through appropriate governance channels when ownership, priorities, or remediation progress cannot be resolved at the operational level.
• Oversee validation of remediation closure, ensuring appropriate evidence is available and established acceptance criteria have been satisfied.
• Identify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.

Regulatory Intelligence and Obligations Management

• Oversee the enterprise cybersecurity regulatory intelligence process, including horizon scanning, emerging requirements, applicability assessments, and regulatory change tracking.
• Maintain a centralized register of applicable cybersecurity regulatory, contractual, and customer obligations.
• Coordinate with Legal, Compliance, Privacy, and designated subject matter experts to confirm regulatory applicability, interpretation, and ownership.
• Ensure new or changing requirements are incorporated into compliance roadmaps, control frameworks, assessment activities, and remediation priorities.
• Identify overlapping obligations and o