Commvault

Risk

• Coordinate the intake, review, tracking, and closure of risk exceptions across the enterprise
• Monitor risk remediation activities and drive accountability among business and technical stakeholders
• Maintain and continuously update the operational risk register to ensure alignment with enterprise risk tolerance
• Facilitate coordination among business units, BC/DR owners, and the GRC team during business continuity and disaster recovery planning, testing, and exercises
• Support post‑BC/DR exercise documentation, capturing lessons learned and coordinating follow‑up remediation activities
• Prepare and deliver risk and resilience metrics, dashboards, and reports for leadership and key stakeholders
• Promote a culture of proactive risk management and operational resilience across the organization
• Support GRC‑led enterprise risk initiatives and contribute to the development of risk‑based reporting and insights
• Collaborate with security, compliance, legal, IT, and business teams to ensure a holistic view of enterprise risks
• Develop into a people manager, leading a small team supporting risk management and resilience initiatives
• Ensure strong cross‑functional partnerships across operational risk areas
• Perform other duties and responsibilities appropriate for the Risk and Resilience Manager role

Risk and Resilience Manager

Compliance

• Own and lead the FedRAMP High authorization program, including initial authorization, continuous monitoring, annual assessments, and audits.
• Serve as the primary point of accountability for government compliance programs, ensuring readiness, accuracy, and timeliness.
• Coordinate cross-functional execution to meet government compliance requirements.
• Manage compliance roadmaps, milestones, dependencies, risks, and remediation efforts.
• Oversee evidence collection, documentation management, policy updates, and audit support.
• Identify, assess, and lead implementation of additional government and sovereign compliance requirements as the business evolves, including U.S. and international frameworks (e.g., CMMC, StateRAMP, IRAP, and foreign government or sovereign cloud equivalents).
• Develop and deliver clear status reporting, metrics, and risk updates to senior leadership.
• Contribute to broader GRC initiatives, including control testing, remediation tracking, and continuous improvement of compliance processes.

Risk and Resilience Manager

Senior Manager – Government Compliance