GRC and AI Governance - Senior Manager

Responsibilities

• Client Advisory & Delivery:
• Lead end-to-end GRC and privacy engagements, including scoping, planning, execution, and executive reporting.
• Design and operationalize cybersecurity governance models (policies, standards, risk appetite, committees, reporting KPIs/KRIs).
• Build and mature enterprise risk programs: risk assessments, risk registers, control libraries, and control testing approaches.
• Develop and implement security policies, standards, and procedures aligned to common frameworks (e.g., NIST CSF, ISO 27001/27002, CIS, SOC 2, CMMC, FedRAMP, NIST AI RMF, ISO 42001).
• Support regulatory readiness and compliance initiatives (e.g., SEC cyber disclosure support, NYDFS 500, GDPR/UK GDPR, CCPA/CPRA, HIPAA, PCI DSS, SOX ITGC, EU AI Act, CMMC, FedRAMP alignment where applicable).
• Stand up or enhance privacy programs: data mapping/inventories, DPIAs/PIAs, DSAR processes, retention, consent management, third-party privacy risk, and privacy by design.
• Support CMMC readiness activities where applicable, including gap analyses and compliance alignment to NIST SP 800-171 (experience a plus, not required).
• Perform vendor/third-party risk assessments and implement scalable TPRM operating models.
• Coordinate cross-functional stakeholders (Legal, IT, Security, Compliance, Product, HR) to drive outcomes and adoption.
• Executive Communication & Stakeholder Management:
• Translate complex technical, regulatory, privacy, and AI governance requirements into business-oriented recommendations.
• Help clients communicate AI risk posture and governance maturity to boards, regulators, and executive leadership, including EU AI Act compliance status and NIST AI RMF alignment.
• Deliver executive-ready artifacts: board/audit committee materials, roadmaps, operating models, heatmaps, and risk dashboards.
• Serve as a trusted advisor to senior leadership; confidently present findings and influence decisions.
• Practice Development & Leadership:
• Support business development through proposal writing, SOW development, client presentations, and solution shaping.
• Contribute to go-to-market development: offerings, templates, accelerators, methodologies, and points of view.
• Mentor and develop consultants and managers; lead teams across multiple engagements while maintaining quality and delivery rigor.
• Partner with other CFGI service lines (Accounting Advisory, CFO Advisory, Technology Enablement) to deliver integrated solutions.
• Required Qualifications:
• Eight plus years of relevant experience in cybersecurity GRC, privacy, governance, risk management, compliance, or consulting (level will map to experience).
• Bachelor's degree in a related field is required.
• Demonstrated expertise implementing and operationalizing cybersecurity frameworks and control programs: NIST CSF / NIST 800-53, ISO 27001/27002, SOC 2, CIS, NIST AI RMF, ISO 42001; familiarity with CMMC and FedRAMP a plus.
• Strong privacy fundamentals and experience with privacy program build-out and operations: GDPR/UK GDPR, CCPA/CPRA; experience with HIPAA/GLBA or other sectoral privacy standards is a plus.
• Demonstrated expertise in AI governance and compliance frameworks (NIST AI RMF, EU AI Act, ISO 42001), including AI risk classification, algorithmic impact assessments, responsible AI principles, and practical application within enterprise or client-facing advisory engagements.
• Exposure to CMMC or FedRAMP readiness activities is a plus but not required.
• Experience performing or leading: enterprise/security risk assessments, control design/testing, policy and standards development, TPRM programs, compliance/regulatory readiness programs, AI governance program design and implementation.
• Exceptional written and verbal communication skills with a track record of producing executive-level deliverables.
• Proven ability to lead teams, manage timelines/budgets,

Additional Information

CFGI is seeking a Cybersecurity GRC & AI Governance Subject Matter Expert to lead and deliver strategic advisory engagements that strengthen clients' security governance, risk management, compliance posture, AI governance programs, and privacy programs. This role blends hands-on delivery, executive communication, and practice leadership. You will work directly with CISOs, CIOs, CFOs, General Counsel/Privacy Counsel, Risk Leaders, and PE deal teams to design pragmatic programs, build operating models, and drive measurable outcomes. The ideal candidate brings deep expertise in GRC frameworks, regulatory compliance, privacy, and AI governance and compliance (e.g., NIST AI RMF, EU AI Act), strong consulting instincts, and a proven ability to lead teams and manage multiple client workstreams.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at cfgi? Share your experience