We are seeking a high-agency, strategic Senior Manager to serve as the enterprise execution lead for our security compliance and certification portfolio. This role directly supports our global assurance programs, focusing on translating complex regulatory requirements (NIS2, ISO/IEC 27001, EU CRA, and customer-driven mandates) into seamless enterprise execution.

You will work across product security, IT, engineering, and legal disciplines to build a continuously audit-ready organization. Your core objective is translating baseline regulatory interpretations into actionable, automated, and defensible engineering reality.

Job Responsibilities:

• Portfolio Architecture: Direct the execution of a multi-framework security compliance portfolio. Engineer end-to-end operational traceability linking regulatory obligations directly to technical controls and automated systems.

• Operational Execution: Co-own the operationalization of compliance mandates with central GRC and Legal leadership. Translate legal interpretations into actionable engineering deliverables and actively manage cross-functional dependencies.

• Risk & Escalation Governance: Govern the identification, quantification, and remediation tracking of compliance risks. Wield the authority to enforce SLAs and escalate material blockers directly to executive leadership.

• Audit Command & Quality: Enforce stringent quality standards for technical system descriptions and continuous evidence generation. Command external audit operations to maintain a continuously audit-ready posture.

• Team Leadership: Manage, mentor, and scale a high-performing compliance team. Define clear accountability matrices, allocate workload dynamically, and establish rigorous execution standards.

Minimum Requirements:

• Education: BSc/MSc in Cybersecurity, Information Systems, Systems Engineering, Law, or a highly related technical discipline.

• Experience: 10+ years of progressive leadership experience in cybersecurity, enterprise risk, compliance, product security, or technical assurance domains.

• Portfolio Capability: Senior-level ability to architect and deliver multi-initiative compliance portfolios within highly regulated, certification-driven environments.

• Audit Leadership: Verifiable track record of commanding external audits, driving regulatory compliance initiatives, and successfully closing technical control gaps.

• People Management: Demonstrated team leadership expertise, characterized by high-agency decision-making, strict prioritization, and precise escalation judgment.

• Executive Communication: Elite written and verbal communication skills. Capable of synthesizing complex regulatory risks into executive-level briefings, telemetry dashboards, and decision frameworks.

Preferred Requirements:

• Professional Certifications: Active credentials such as CISSP, CISM, CISA, PMP, or ISO/IEC 27001 Lead Implementer.

• Regulatory Specialization: Deep operational understanding of software security requirements, secure SDLC, vulnerability disclosure programs, and emerging global mandates (specifically EU Cyber Resilience Act).

• Operational Flexibility: Availability to support critical audit cycles and off-hours engagement, with occasional travel for on-site assessments and executive stakeholder alignment.