GRC and AI Governance - Senior Manager

A senior manager and subject matter expert in CFGI's growing Cybersecurity practice, leading advisory work on security governance, risk and compliance, privacy and AI governance for private equity sponsors, their portfolio companies and public companies. The role combines hands-on delivery, executive advice and practice building.

The senior manager runs GRC and privacy engagements from scoping to executive reporting, designs governance models, policies and risk programs, and aligns clients to frameworks such as NIST CSF, ISO 27001, SOC 2, CMMC and FedRAMP. A large share of the work is AI governance: building frameworks, model inventories and use-case tiering, running AI risk and impact assessments, and guiding clients on the EU AI Act, NIST AI RMF and ISO 42001. The role also covers regulatory readiness for rules such as NYDFS 500, SEC cyber disclosure and HIPAA, privacy program build-outs including DPIAs and DSAR handling, third-party risk, and board-ready materials. Mentoring consultants and managers, writing proposals and shaping new offerings are part of it.

CFGI wants eight or more years in cybersecurity GRC, privacy, risk, compliance or consulting, proven experience putting security frameworks and control programs into practice, solid privacy fundamentals, and demonstrated depth in AI governance frameworks and AI risk classification. GDPR and CCPA experience, team and budget leadership, and certifications such as CISSP, CISM, CRISC, CIPP or ISO 42001 Lead Implementer help.