Senior Manager, Enterprise Cybersecurity Compliance

Role Summary

Aptiv is seeking an experienced Senior Manager, Enterprise Cybersecurity Compliance to lead the execution and coordination of its global cybersecurity compliance portfolio. This is a highly visible leadership position requiring strong program management capabilities, sound judgment, executive presence, and the ability to drive accountability across a complex, multinational organization.

Reporting to the Director, Enterprise GRC, this individual will oversee integrated compliance planning, assessment readiness, regulatory obligations, remediation commitments, and executive reporting across Aptiv's cybersecurity compliance programs. These include CMMC, NIS2, TISAX, FedRAMP, ISO 27001, applicable security requirements under GDPR, and customer and contractual cybersecurity obligations.

The Senior Manager will work closely with designated framework owners, regulatory specialists, Legal, Compliance, cybersecurity teams, and business leaders to ensure compliance activities are effectively coordinated and commitments are delivered. The position does not require deep expertise in every regulatory framework but does require sufficient cybersecurity and compliance knowledge to evaluate progress, challenge assumptions, identify risks, and drive effective outcomes.

This individual must be comfortable operating independently in demanding environments, including situations involving competing business priorities, regulatory pressures, and challenging senior stakeholder interactions. The successful candidate will demonstrate the confidence and professional maturity to lead difficult discussions, establish clear expectations, resolve ambiguity, and hold stakeholders accountable for agreed commitments.

The position will serve as a key U.S.-based leader within Enterprise GRC, representing the function in cross-functional and executive discussions and working closely with the CISO and senior cybersecurity leadership.

Your Role

Enterprise Compliance Portfolio Leadership

• Lead the integrated execution of Aptiv's enterprise cybersecurity compliance portfolio, coordinating activities across designated regulatory and framework program owners.

• Establish and maintain an enterprise compliance roadmap covering assessments, regulatory milestones, customer obligations, dependencies, remediation commitments, and key deliverables.

• Provide consistent oversight of compliance program execution, ensuring priorities, schedules, responsibilities, and reporting expectations are aligned across the organization.

• Identify interdependencies, resource constraints, competing priorities, and other obstacles that could affect compliance commitments.

• Drive consistency in program planning, assessment readiness, evidence management, issue tracking, and remediation follow-through.

• Maintain consolidated visibility into compliance posture, emerging risks, assessment readiness, and progress against enterprise commitments.

• Support development and adoption of Aptiv's Common Control Framework and continuous compliance capabilities, improving consistency, efficiency, and reuse of control evidence across regulatory programs.

Accountability and Remediation Oversight

• Establish clear ownership, measurable milestones, and closure criteria for compliance findings, control deficiencies, and remediation commitments.

• Drive accountability across business, technology, and compliance stakeholders, including individuals and teams outside the position's direct reporting authority.

• Actively manage overdue commitments, unresolved dependencies, and competing priorities to maintain progress toward compliance objectives.

• Work with program owners and responsible technical or business teams to establish realistic, risk-informed remediation plans.

• Challenge incomplete remediation plans, unsupported conclusions, and commitments that do not adequately address identified compliance risks.

• Ensure compliance issues are escalated through appropriate governance channels when ownership, priorities, or remediation progress cannot be resolved at the operational level.

• Oversee validation of remediation closure, ensuring appropriate evidence is available and established acceptance criteria have been satisfied.

• Identify recurring weaknesses and work with responsible teams to establish sustainable corrective actions.

Regulatory Intelligence and Obligations Management

• Oversee the enterprise cybersecurity regulatory intelligence process, including horizon scanning, emerging requirements, applicability assessments, and regulatory change tracking.

• Maintain a centralized register of applicable cybersecurity regulatory, contractual, and customer obligations.

• Coordinate with Legal, Compliance, Privacy, and designated subject matter experts to confirm regulatory applicability, interpretation, and ownership.

• Ensure new or changing requirements are incorporated into compliance roadmaps, control frameworks, assessment activities, and remediation priorities.

• Identify overlapping obligations and opportunities to streamline compliance activities across multiple frameworks.

• Provide leadership with visibility into emerging regulatory developments, potential business impacts, and required organizational actions.

Assessment and Audit Coordination

• Lead enterprise coordination of cybersecurity assessments, regulatory reviews, customer security assessments, and independent third-party evaluations.

• Establish consistent assessment planning and readiness expectations across designated framework owners and participating organizations.

• Coordinate assessment schedules, evidence requirements, accountable stakeholders, milestones, and escalation procedures.

• Work with framework specialists and control owners to ensure evidence is complete, current, validated, and ready for assessment.

• Serve as a senior coordination and escalation point for assessment-related challenges, unresolved dependencies, and material findings.

• Track assessment results and ensure findings are incorporated into accountable remediation plans.

• Drive lessons learned and improvements in assessment preparation, evidence management, and control validation.

Executive Engagement and Organizational Influence

• Independently represent Enterprise GRC in cross-functional discussions involving senior cybersecurity, technology, Legal, Compliance, and business leadership.

• Provide concise, decision-oriented reporting on compliance program status, material risks, milestones, and remediation progress to the Director, Enterprise GRC, CISO, and other senior executives.

• Lead complex discussions involving competing organizational priorities, regulatory concerns, assessment findings, and remediation expectations.

• Exercise sound judgment and professional confidence when challenging assumptions, clarifying responsibilities, and addressing disagreements.

• Build productive relationships with senior stakeholders while maintaining clear expectations for accountability and execution.

• Establish clear decisions, accountable owners, milestones, and follow-up actions from significant compliance discussions.

• Exercise delegated authority to coordinate compliance execution, resolve operational impediments, and escalate matters requiring executive intervention.

• Serve as a trusted U.S.-based leadership representative of Enterprise GRC, capable of managing significant compliance matters independently within established authority.

Team Leadership and Operational Excellence

• Lead, coach, and develop assigned cybersecurity compliance analysts and team members.

• Establish clear performance expectations, priorities, and accountability for compliance deliverables.

• Oversee team workload, assessment coordination, reporting activities, and remediation tracking.

• Develop consistent practices for compliance planning, issue management, evidence validation, regulatory tracking, and executive reporting.

• Foster eff