Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 8 days ago

Senior Manager, Security & Compliance

Navan220 open roles

Pay
$164,025 – $364,700 a year
Where
Boston, MA; New York, NY
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Manager, Security & ComplianceNavan · Boston, MA; New York, NY

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Navan's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. Navan postings stay open a median of 42 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 8 days ago

Navan median: 42 days open

The posting

We are looking for a strategic and hands-on Senior Manager, Security and Compliance to oversee our global GRC function. This leader will be responsible for the design, implementation, and maturation of our comprehensive security compliance programs, ensuring our infrastructure and processes meet the highest industry standards. You will manage a team of specialists to align our security posture with an expanding portfolio of frameworks, including ISO 27001, PCI DSS, SOC 1/2, and Cyber Essentials. You will also manage the US Regulated Markets team, which will manage FedRAMP, ITAR, and iL4/5 programs.

What You’ll Do:

Compliance Strategy & Audit Leadership

  • Program Oversight: Lead the strategy for multi-framework compliance, executing internal and external audits for ISO 27001, SOC 1, SOC 2, PCI DSS, and Cyber Essentials, along with FedRAMP, ITAR, and DoD IL4/5.
  • Audit Management: Act as the senior point of escalation for audit requests, defining testing scopes and managing relationships with external auditors.
  • AI and Automation: Champion an AI-first strategy for GRC by integrating artificial intelligence and automated workflows to streamline continuous compliance monitoring, automated evidence collection, and predictive risk management across global frameworks.
  • Control Governance: Oversee the regular testing of security controls, including access management, change control, and data recovery.
  • Compliance by Design: Ensure all new systems are onboarded into the environment with a "compliance by design" approach.

Risk & Governance Management

  • Enterprise Risk: Direct periodic assessments of security controls, policies, and standards across the entire organization.
  • Remediation Strategy: Lead the identification of control deficiencies and approve robust remediation plans to address gaps.
  • Policy Architecture: Author and maintain high-level information security policies and standards to ensure global regulatory alignment.
  • GRC Roadmap: Drive the development and implementation of GRC tools and centralized evidence repositories to streamline operations.

Team Leadership & Collaboration

  • Mentorship: Manage and develop a team of GRC analysts, fostering a culture of technical excellence and automation.
  • Stakeholder Engagement: Partner with leadership in People Ops, Finance, Legal, IT, and Engineering to bridge cross-functional control gaps.
  • Executive Reporting: Synthesize complex compliance data into actionable metrics and status reports for senior management.
  • Security Culture: Oversee the delivery of security awareness programs and promote compliance best practices company-wide.

What We’re Looking For:

  • Experience: 7+ years in security GRC or IT auditing, with at least 2 years in a supervisory or lead capacity.
  • Deep Framework Expertise: Expert-level understanding of ISO 27001, PCI DSS, SOC frameworks, and Cyber Essentials. Experience in US Regulated markets like FedRAMP, ITAR, DOD IL4/IL5 as well.
  • Cloud Infrastructure: Advanced knowledge of security controls within AWS (Azure or GCP is a plus).
  • Technical Depth: Practical understanding of security architecture, network security, and access control in cloud-native environments. Understanding of AI, AI governance and guardrails.
  • Strategic Communication: Proven ability to communicate complex security and compliance risks to executive stakeholders.
  • Automation Mindset: Track record of implementing automated evidence collection and process improvements.

Preferred Qualifications

  • Education: Bachelor’s or Master’s degree in Cybersecurity, IT, or a related field.
  • Professional Certifications: CISA, CISM, CISSP, or ISO 27001 Lead Auditor are highly preferred.
  • Framework Integration: Experience building Unified Control Frameworks (UCF) to map multiple standards simultaneously.
  • Regulatory Knowledge: Familiarity with NIST CSF, COBIT, or GDPR.

Success Factors

  • Ability to manage multiple high-priority compliance projects and deadlines simultaneously.
  • Technical mastery of how security controls satisfy diverse regulatory requirements.
  • A proactive approach to monitoring global regulatory changes and emerging security trends.

The posted pay range represents the anticipated low and high end of the compensation for this position and is subject to change based on business need. To determine a successful candidate’s starting pay, we carefully consider a variety of factors, including primary work location, an evaluation of the candidate’s skills and experience, market demands, and internal parity.

For roles with on-target-earnings (OTE), the pay range includes both base salary and target incentive compensation. Target incentive compensation for some roles may include a ramping draw period. Compensation is higher for those who exceed targets. Candidates may receive more information from the recruiter.

Pay Range

$164,025—$364,700 USD

Navan uses AI-assisted Automated Employment Decision Tool (Metaview) to assist with evaluating resumes against job qualifications for this role. All final decisions are made by human recruiters and hiring managers.

Human oversight: Metaview does not automatically reject candidates or make final hiring decisions. Our recruiters and hiring managers review all outputs and make the final hiring decision regarding every application.

  • Your rights: If you prefer to have your application reviewed without AI assistance, you may request a human evaluation by entering your email here. Your decision to do so will not affect how your candidacy is evaluated.

Please refer to our Candidate Privacy Notice for more information about our processing of personal data, and your rights.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Navan's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Navan's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Navan's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.