> Markdown version of [/jobs/ext/222928-sr-manager-information-security](https://www.wearedevelopers.com/jobs/ext/222928-sr-manager-information-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Manager, Information Security - **Company:** E-Advance, LLC - **Location:** Raleigh, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Business Systems, Cloud Computing, Cyber Security, Customer Data Management, Distributed Systems, PCI Data Security Standards, Software Vulnerability Management, RSA Archer Platform - **Published:** May 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=61f0728b0d18293c ## About the Role Do you have experience in Stakeholder management?, * 6+ years of experience in cybersecurity compliance, GRC, or IT risk management, preferably in a retail or consumer-facing enterprise. * Strong working knowledge of: + NIST Cybersecurity Framework (CSF) + PCI DSS + HIPAA Security Rule + CCPA/CPRA and U.S. privacy obligations * Experience supporting audits and regulatory assessments in complex, distributed environments., * Hands-on experience with OneTrust GRC (or comparable GRC platforms) including compliance automation and evidence workflows. * Experience implementing continuous controls monitoring (CCM) or security metrics programs. * Retail industry experience supporting point-of-sale (POS), e-commerce, or cardholder data environments (CDE). * Familiarity with third-party risk and vendor compliance monitoring. * Relevant certifications (preferred, not required): + CISA, CISSP, CRISC, PCI ISA, or similar. Key Competencies * Strong analytical and risk-based thinking * Ability to translate regulatory language into practical, business-aligned controls * Excellent stakeholder communication and influence skills * Detail-oriented with a strong audit and evidence mindset * Comfortable operating in fast-moving, matrixed retail organizations ## Description The Cybersecurity Compliance Manager is responsible for designing, operating, and continuously improving the company's cybersecurity compliance program within a large-scale retail environment. This role leads the day-to-day execution of compliance activities using the OneTrust GRC platform, with a strong focus on automation, controls monitoring, and audit-ready evidence generation. The role ensures enterprise alignment with NIST Cybersecurity Framework (CSF) and regulatory requirements including PCI DSS, HIPAA, and U.S. state privacy regulations (CCPA/CPRA)., Cybersecurity Compliance Program Execution * Operate and mature the enterprise cybersecurity compliance program aligned to NIST CSF and applicable regulatory frameworks (PCI DSS, HIPAA, CCPA/CPRA). * Translate regulatory and framework requirements into clear, monitored internal controls mapped to business systems and processes. * Serve as a subject matter expert for cybersecurity control compliance across IT, cloud, retail, e-commerce, and corporate environments. * Lead day-to-day use of the OneTrust GRC compliance modules, including: + Control libraries and framework mappings + Automated evidence collection and surveys + Workflow-driven control testing and remediation tracking + Compliance reporting and dashboards * Implement and enhance automation to reduce manual effort and eliminate point-in-time compliance gaps. * Partner with IT, Audit and Security teams to integrate OneTrust with upstream systems where feasible (e.g., vulnerability management, asset inventories). Controls Monitoring & Assurance * Establish and operate a continuous controls monitoring (CCM) model in dynamic retail and cloud environments. * Monitor control performance, SLA adherence, and exception trends across in-scope systems (e.g., PCI environments, customer data platforms). * Track control effectiveness metrics and produce regular compliance reporting for leadership. * Coordinate and support internal and external audits and assessments, including: + PCI DSS attestations + HIPAA risk and compliance reviews + Privacy regulatory inquiries and assessments * Maintain audit-ready evidence within OneTrust and drive timely remediation of findings. * Partner with IT, Internal Audit, Legal, and Privacy to ensure consistent interpretation and execution of control requirements. * Work closely with system owners, IT leaders, cybersecurity team, and business partners to ensure controls are properly implemented and operated. * Assign control ownership, track accountability, and facilitate risk acceptance where appropriate. * Provide guidance and training to control owners on compliance expectations, evidence requirements, and remediation processes. ## Related Videos - [APIs and Architecture for scaling omnichannel payments](https://www.wearedevelopers.com/videos/90-apis-and-architecture-for-scaling-omnichannel-payments) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)