Senior Manager, Cyber Governance & Risk Management

The Team

A global Cyber Governance, Risk & Compliance (GRC) team that is responsible for managing cyber risk, driving policy adherence, enabling compliance, supporting customer trust initiatives, and delivering enterprise-wide governance processes. The team partners across IT, Security, Legal, Risk, Privacy, Sales, and Business functions to deliver integrated risk management and assurance capabilities.

The Role

The Senior Manager, Cyber Governance & Risk Management will lead enterprise-wide cybersecurity governance, policy management, technology risk oversight and third-party risk management. This role is responsible for ensuring alignment with regulatory, contractual, and internal security requirements while enabling business operations, supporting revenue growth, and maintaining customer trust.

Responsibilities And Impact

• Lead the development, maintenance, and enforcement of cybersecurity governance frameworks, policies, and standards aligned to ISO 27001, SOC 2, TISAX, and regulatory requirements.
• Oversee technology risk management activities, including identification, assessment, and mitigation of cyber risks across applications, infrastructure, and cloud environments.
• Manage third-party risk assessments, including vendor onboarding reviews, ongoing monitoring, and alignment to contractual, regulatory, and customer assurance requirements.
• Develop and deliver monthly cybersecurity governance, risk, compliance, third-party risk, and client assurance metrics and reports to leadership and governance forums (e.g., ISGC), providing insights on risk posture, trends, and remediation progress.
• Own enterprise security awareness and education programs, including phishing simulations and human firewall initiatives to reduce human risk exposure.
• Govern the lifecycle of cybersecurity risk exceptions, including intake, review, approval, tracking, and reporting to leadership and governance bodies.
• Prepare and coordinate materials for the Information Security Governance Committee (ISGC), including metrics, risk reporting, and executive-level insights.
• Support internal and external audit readiness, including evidence management and coordination for ISO 27001, SOC 2, and other certification activities, ensuring alignment with both regulatory and customer assurance requirements.
• Collaborate with stakeholders across Legal, Privacy, Risk, Sales, and business units to drive risk remediation, support client-facing assurance needs, and enable secure business operations.
  
  

Required Skills

What We're Looking For:

• 6-8 years working experience in one or more of areas of controls compliance, tech risk management and/or vendor risk management.
• Strong experience in cybersecurity governance, risk management, and compliance frameworks (ISO 27001, NIST, TISAX).
• Proven ability to manage third-party risk programs and vendor security assessments.
• Experience developing metrics, dashboards, and executive-level reporting for cyber risk and compliance programs.
• Experience with policy development, audit support, and regulatory compliance activities.
• Strong communication skills with ability to translate technical risks into business impact and customer-facing assurance messaging.
• Ability to lead cross-functional initiatives and influence senior stakeholders across Security, Legal, and commercial teams.
• Problem-solving mindset with strong organizational and analytical skills.
  
  

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

It is the policy of Mobility to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Mobility will provide reasonable accommodations for qualified individuals with disabilities.