Manager – Cybersecurity GRC Compliance

Ford Motor Company

Cyber GRC Compliance Manager ensuring organizational compliance with cybersecurity and regulatory frameworks. Leading audits and managing certification lifecycles for Ford's enterprise technology.

Posted 7/24/2026full-timeRemote • Missouri • 🇺🇸 United StatesMid-LevelSenior💰 $115,500 - $218,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity compliance and audit management, with a strong focus on developing and executing certification roadmaps, managing audit readiness programs, and optimizing GRC tools for effective compliance processes. Proven ability to communicate complex technical issues to diverse audiences and lead cross-functional partnerships to enhance organizational risk management.

Highest-signal resume keywords

Cybersecurity ComplianceGRC Tool ProficiencyISO 27001 Certification ManagementRisk Assessment LeadershipProgram Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity ComplianceGRC ManagementAudit Readiness ProgramsRisk AssessmentContinuous Evidence ManagementMock AuditsControl MonitoringCertification Scope ExpansionTechnical Issue Translation

Soft Skills

Exceptional Communication SkillsCross-Functional CollaborationProgram Management

Tools & Technologies

Archer GRCServiceNow GRCOneTrust

Certifications & Qualifications

ISO 27001 Lead AuditorCISACRISCCISSPCISM

Industry Keywords

NIST CSFISO StandardsGDPRCCPAThree-Line-of-Defense Model

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Driving the organization's certification expansion roadmap, maintaining continuous evidence readiness, and ensuring ongoing internal and external audit preparedness
Directing the end-to-end lifecycle of internal cybersecurity audits and compliance certifications
Developing and executing a multi-year certification roadmap while driving continuous readiness through proactive gap analyses, mock audits, and a centralized evidence repository
Leading enterprise risk assessments, maintaining a continuous risk register with clear mitigation timelines
Partnering cross-functionally with engineering, legal, IT, cybersecurity, and business leadership to embed audit readiness into daily operations
Optimizing GRC tooling to automate compliance processes and streamline evidence collection
Delivering executive-level compliance metrics and risk dashboards that track certification roadmap progress

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or equivalent professional experience.
At least 5+ years of experience in cybersecurity compliance, GRC, IT audit, or certification management.
Demonstrated hands-on experience managing initial certification, scope expansion, and annual/surveillance audits, such as ISO 27001, SOC2, NIST CSF, or similar.
Proven experience building and maintaining audit readiness programs, including continuous evidence management processes.
Proficiency with GRC platforms/tools for evidence, control management, and continuous monitoring (e.g., Archer GRC, ServiceNow GRC, OneTrust)
Exceptional verbal and written communication skills to effectively translate technical issues to non-technical audiences.
Experience directly interfacing with external auditors/certification bodies and managing audit logistics.
Strong program management skills with the ability to balance multiple concurrent audit timelines.
Active industry credential certification such as ISO 27001 lead auditor/implementer, CISA, CRISC CISSP, or CISM.
Strong knowledge of NIST or ISO, and familiar with global data privacy regulations including GDPR, CCPA, and their intersection with technology risk management.
Experience operating within a three-line-of-defense(3LOD) risk governance model, particularly within a second-line GRC/risk oversight function.
Prior experience managing certification scope expansion (e.g., adding new sites, business units, or product lines to an existing certification with business/IT alignment)
Familiarity with continuous control monitoring (CCM) approaches and GRC tool compliance features.
Experience managing relationships with multiple certification bodies/external audit firms simultaneously.
Background in leading mock audits or internal audit programs

Benefits

Comp & perks

Immediate medical, dental, vision and prescription drug coverage
Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
Vehicle discount program for employees and family members and management leases
Tuition assistance
Established and active employee resource groups
Paid time off for individual and team community service
A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
Paid time off and the option to purchase additional vacation time