Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Governance, Risk & Compliance Manager

VIAVI Solutions142 open roles

Where
Chandler-HQ, AZ USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGovernance, Risk & Compliance ManagerVIAVI Solutions · Chandler-HQ, AZ USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on VIAVI Solutions's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. VIAVI Solutions postings stay open a median of 14 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted yesterday

VIAVI Solutions median: 14 days open

The posting

Summary:

VIAVI (NASDAQ: VIAV) is a global provider of network test, monitoring and assurance solutions for telecommunications, cloud, enterprises, first responders, military, aerospace, and railway. VIAVI is also a leader in light management technologies for 3D sensing, anti-counterfeiting, consumer electronics, industrial, automotive, government and aerospace applications.

We are the people behind the products that help keep the world connected at home, school, work, at play, and everywhere in between. VIAVI employees are passionate about supporting customer success and we welcome people who bring their best every day to the company – to question, to collaborate and to push for solutions that will delight our customers.

Duties & Responsibilities:

Position Summary

VIAVI Solutions is seeking a Manager, Governance, Risk & Compliance (GRC) to lead and mature the company's information security governance, cybersecurity risk, compliance and assurance capabilities.

This is a player-coach role with a strong hands-on expectation. The successful candidate will provide leadership for the GRC function while remaining directly involved in risk assessments, policy development, control assessments, audit preparation, compliance activities, evidence reviews and remediation.

The Manager will have key responsibility for VIAVI's ISO 27001, CMMC and AI Governance programs and will partner across Security Engineering, Cyber Defense, Product Security, IT, Legal, Privacy, Internal Audit and business teams.

The role will help establish a scalable, risk-based governance model that translates regulatory, contractual and business requirements into clear security expectations, accountable ownership and measurable outcomes.

Key Responsibilities

Information Security Governance

  • Develop, maintain and continuously improve the enterprise information security governance framework.
  • Develop and maintain security policies, standards, procedures and supporting governance documentation.
  • Establish clear security-control ownership and accountability across the organization.
  • Maintain security exception, risk-acceptance and waiver processes.
  • Translate regulatory, contractual and business requirements into practical security requirements.
  • Promote consistent and sustainable security practices across the organization.

Cybersecurity Risk Management

  • Develop and operate cybersecurity risk-management processes and methodologies.
  • Lead risk assessments for significant technologies, business initiatives, third parties and changes to the technology environment.
  • Maintain visibility into significant cybersecurity risks, owners, treatment plans, exceptions and residual risks.
  • Facilitate risk-treatment and risk-acceptance decisions with business and technology stakeholders.
  • Develop meaningful cybersecurity risk reporting for security leadership and executive stakeholders.

ISO 27001 & CMMC

  • Lead the ongoing management and continuous improvement of VIAVI's Information Security Management System (ISMS).
  • Coordinate ISO 27001 risk assessments, control reviews, internal assessments, corrective actions and certification/surveillance readiness.
  • Lead GRC activities supporting CMMC readiness and ongoing compliance.
  • Coordinate CMMC scoping, control ownership, documentation, evidence and assessment preparation.
  • Partner with technical and business control owners to identify and remediate security-control gaps.
  • Establish sustainable evidence-management and control-validation practices.

AI Governance

  • Develop and mature VIAVI's enterprise AI governance and risk-management framework.
  • Establish governance requirements for the responsible and secure adoption of AI technologies.
  • Develop an AI risk-tiering approach considering factors such as data sensitivity, autonomy, technology risk and business impact.
  • Establish governance processes for assessing and approving AI tools, applications and use cases.
  • Define AI-related exception and risk-acceptance processes.
  • Establish appropriate governance expectations for sensitive-data use and human oversight of higher-risk AI applications.
  • Partner with Security Engineering to translate AI governance requirements into technical controls and guardrails.
  • Partner with Legal, Privacy, Procurement, IT and business stakeholders on AI-related risk and governance requirements.
  • Monitor relevant AI standards and regulatory developments and incorporate applicable requirements into VIAVI's governance program.
  • Support alignment, as appropriate, with frameworks such as NIST AI RMF and ISO/IEC 42001.

Compliance, Assurance & Leadership

  • Coordinate cybersecurity-related internal and external assessments and audits.
  • Evaluate control implementation and supporting evidence against defined requirements.
  • Coordinate remediation with control owners and monitor significant security and compliance gaps.
  • Partner with Legal, Privacy, Internal Audit, Security and technology teams on overlapping regulatory and assurance requirements.
  • Support customer or third-party cybersecurity assurance activities as appropriate.
  • Operate as a player-coach, personally performing critical GRC work while developing the broader capability.
  • Mentor team members and establish repeatable, sustainable GRC processes rather than point-in-time compliance activities.

Pre-Requisites / Skills / Experience Requirements:

Required Qualifications

  • 10+ years of progressive experience in cybersecurity, information security governance, risk management, compliance, audit or security assurance.
  • Significant hands-on experience with cybersecurity governance and risk-management activities.
  • Demonstrated experience leading or materially contributing to major cybersecurity compliance, audit or assurance programs.
  • Experience developing policies, performing risk assessments, evaluating controls, reviewing evidence and managing remediation.
  • Strong understanding of common cybersecurity frameworks and control concepts.
  • Experience translating regulatory, contractual and risk requirements into practical control requirements.
  • Experience working collaboratively across technical, Legal, Privacy, Audit and business stakeholders.
  • Strong written and verbal communication skills, including the ability to communicate cybersecurity risk to leadership.
  • Demonstrated leadership, stakeholder-management and mentoring capabilities.
  • Experience with AI governance, AI risk management or emerging technology governance.
  • Experience with implementing and maintaining tools like Vanta, Drata, Sprinto etc.
  • Familiarity with Third-Party Vendor Risk Management processes
  • Familiarity with UK Cyber Essentials, EU-CRA, PCI DSS and SOC 2.
  • Familiarity with managing Security Awareness Program including tools like KnowBe4, Adaptive Security etc.

Preferred Qualifications

  • Experience leading or operating an ISO 27001 ISMS.
  • Experience with CMMC and/or NIST SP 800-171.
  • Experience with cybersecurity regulatory or customer assurance requirements.
  • Experience with AI governance, AI risk management or emerging technology governance.
  • Experience with implementing and maintaining tools like Vanta, Drata, Sprinto etc.
  • Familiarity with Third-Party Vendor Risk Management processes
  • Familiarity with UK Cyber Essentials, EU-CRA, PCI DSS and SOC 2.
  • Familiarity with NIST AI RMF, ISO/IEC 42001 or similar AI governance frameworks.
  • Familiarity with managing Security Awareness Program including tools like KnowBe4, Adaptive Security etc.
  • Relevant certifications such as CISSP, CISM, CRISC, CISA, ISO 27001 Lead Implementer/Lead Auditor or comparable credentials.
  • Previous people-management or GRC team-leadership experience.
  • This position requires use of information which is subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. Persons within the meaning of ITAR. ITAR defines a U.S. Person as a U.S. Citizen or National, U.S. Lawful Permanent Resident (i.e. 'Green Card Holder'), Political Asylee, Refugee, or Temporary Resident granted amnesty.

If you have what it takes to push boundaries and seize opportunities, apply to join our team today.

VIAVI Solutions is an equal opportunity and affirmative action employer – minorities/females/veterans/persons with disabilities.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against VIAVI Solutions's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on VIAVI Solutions's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    VIAVI Solutions's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.