Barnes Aerospace

Compliance

• Drive and sustain governance, risk, and compliance across engineering, manufacturing, and corporate environments
• Report to the CISO and lead a team of GRC professionals
• Lead enterprise-wide IT execution of CMMC and other compliance program lifecycles
• Define scope, SSP/POA&M, evidence quality and refresh cadence, assessor coordination, corrective-action closure, and site-level readiness
• Coordinate control owners through a global matrix model
• Translate policies and strategic objectives into standardized processes across plants, engineering teams, and corporate functions
• Drive remediation programs and provide transparency into readiness, progress, and risk
• Mentor team members, prioritize workload, develop capability, and foster global collaboration
• Own preparation for and participation in customer and third-party audits and security questionnaires
• Leverage AI technologies to reduce manual GRC effort
• Maintain a business-impact view of risk, track remediation commitments, and escalate gaps to leadership
• Coordinate evidence, close findings, and establish sustainable corrective-action plans
• Champion a global security culture and promote accountability and risk ownership
• Translate regulatory topics into clear employee expectations
• Partner with HR and stakeholders to deliver targeted training, awareness, and role-based education
• Manage the end-to-end vendor security risk lifecycle, including assessments, treatment, remediation, and monitoring
• Operate supplier security expectations with key stakeholders and escalate systemic vendor-risk trends
• Govern data protection for intellectual property, manufacturing processes, export-controlled data, and cloud workloads
• Validate classification, DLP, access-control, and retention standards
• Govern security and compliance aspects of business continuity and disaster recovery readiness
• Define resilience-control requirements and validate recovery playbooks, exercises, and evidence
• Partner with technology and business service owners to close identified gaps

Global Security Governance, Risk & Compliance Manager

Security Operations

• Build and run a scalable global security operations capability
• Own daily security operations service delivery, including ticket intake, triage, prioritization, escalation, case quality, and closure
• Manage managed security service providers and other third-party security services
• Establish severity definitions, investigation standards, escalation paths, response playbooks, and executive notification criteria
• Report operational health and risk to the CISO using coverage, detection quality, response, backlog, and remediation measures
• Build the operating model and talent roadmap for a scalable global security operations function
• Lead enterprise-wide security operations and incident response, including detection, triage, containment coordination, eradication support, root-cause analysis, and post-incident review
• Own incident documentation, evidence preservation, lessons learned, corrective actions, and closure validation
• Lead incident tabletop exercises and coordinate security participation in recovery readiness
• Partner with IT, engineering, manufacturing, and business service owners on timely remediation
• Establish the cadence for converting vulnerability, asset, identity, cloud, and threat findings into prioritized remediation actions
• Track remediation commitments, challenge overdue high-risk items, and escalate unresolved exposure
• Ensure security monitoring and response requirements are incorporated into major initiatives
• Define telemetry standards, coverage models, automation pipelines, and detection use cases
• Improve detection fidelity through tuning, enrichment, automation, and lifecycle management
• Leverage approved AI capabilities and automation to improve detection, investigation, response, documentation, and security operations maturity
• Define monitoring and logging requirements and close coverage gaps
• Translate threat intelligence into detections, hunts, response playbooks, and countermeasures
• Collaborate with vulnerability management, risk, and red teams to reduce attack surface
• Understand and respond to IOCs, TTPs, ransomware, and supply-chain threats
• Report to the CISO and lead and develop internal staff as the function grows

Global Security Governance, Risk & Compliance Manager

Global IT Security Operations Lead – Exposure Management