About the company
Navan is looking for a strategic and hands-on Senior Manager, Security and Compliance to oversee the global GRC function within the Security, Risk & Fraud department.
Responsibilities
- Lead strategy for multi-framework compliance and execute internal/external audits for ISO 27001, SOC 1, SOC 2, PCI DSS, Cyber Essentials, FedRAMP, ITAR, and DoD IL4/5
- Act as senior escalation point for audit requests and manage external auditor relationships
- Champion an AI-first strategy for GRC with automated workflows and continuous compliance monitoring
- Oversee testing of security controls including access management, change control, and data recovery
- Ensure compliance by design for new systems
- Direct periodic assessments of security controls, policies, and standards
- Lead identification of control deficiencies and approve remediation plans
- Author and maintain information security policies and standards
- Drive development of GRC tools and centralized evidence repositories
- Manage and develop a team of GRC analysts
- Partner with People Ops, Finance, Legal, IT, and Engineering
- Synthesize compliance data into metrics and reports for senior management
- Oversee security awareness programs
Requirements
- 7+ years in security GRC or IT auditing, with at least 2 years in a supervisory/lead capacity
- Expert-level understanding of ISO 27001, PCI DSS, SOC frameworks, Cyber Essentials, and US regulated markets (FedRAMP, ITAR, DoD IL4/IL5)
- Advanced knowledge of security controls within AWS (Azure or GCP a plus)
- Practical understanding of security architecture, network security, and access control in cloud-native environments
- Understanding of AI, AI governance, and guardrails
- Proven ability to communicate complex risks to executive stakeholders
- Track record of implementing automated evidence collection
- Preferred: Bachelor's/Master's in Cybersecurity or IT; CISA, CISM, CISSP, or ISO 27001 Lead Auditor; experience with Unified Control Frameworks; familiarity with NIST CSF, COBIT, GDPR
Conditions
- Pay range: $164,025 – $364,700 USD
- AI-assisted resume evaluation (Metaview) with human oversight; option to request human evaluation