Senior Manager, IT Compliance

At Materion, everyone is included, respected and offered opportunity to grow. Join us!

The Senior Manager of IT Compliance is responsible for leading the organization’s IT compliance strategy and execution, ensuring adherence to federal regulatory requirements including ITAR, CMMC and NIST SP 800-171 as well as SOX, GDPR and HIPAA. This role will oversee the implementation and governance of security controls, manage physical and digital data flows, and lead compliance-related engineering efforts across the business. The Senior Manager will collaborate cross-functionally with Legal, Supply Chain, Finance, Internal Audit, Operations, and Executive Management to ensure an integrated and proactive compliance posture, while managing a Governance, Risk, and Compliance (GRC) solution to support enterprise-wide monitoring and reporting.

You Will Have an Opportunity To:

• Lead Compliance Program for regulatory and compliance requirements

• Interpret regulatory technical requirements and translate them into actionable controls and manage applicable policies

• Drive implementation of compliance roadmap, milestones, and reporting metrics

• Ensure continuous alignment with evolving standards and audit expectations

• Service as the primary subject expert for regulatory and compliance technical requirements

• Third party risk management

Document and Manage Physical and Digital Data Flows

• Map all Controlled Unclassified Information (CUI) flow across systems and departments

• Identify gaps in protections and recommend architectural changes

• Maintain and update data flow diagrams and documentation

• Validate data handling processes with operational stakeholders

Implement and Oversee Security and Access Controls

• Collaborate with IT and Security teams to configure and test technical controls

• Define and enforce security control policies across systems

• Monitor enforcement and perform regular access reviews

• Assist in incident response planning and compliance investigations

Implement and Manage GRC Platform 

• Select, implement, and administer a scalable GRC tool

• Develop workflows, dashboards, and compliance reporting

• Automate control testing and issue tracking

• Integrate the GRC tool with other IT and compliance systems

• Install and troubleshoot hardware/software, PCs, printers, servers, and other devices

Cross-Functional Consulting and Training

• Serve as a liaison to Legal, Compliance, Finance, Internal Audit, External Audit and business unit leaders

• Assist with preparing for audits, facilitate audit activities and manage any findings

• Provide training to employees on IT compliance expectations

• Conduct periodic compliance reviews with department leaders

• Promote culture of security and regulatory awareness

REQUIREMENTS:

• Bachelor’s degree in computer science, Information Technology, or a related field

• Equivalent experience in the industry may be considered in lieu of a degree

• Minimum 8 years of experience in IT compliance, cybersecurity, or information governance

• 3+ years of leadership experience in regulated industry

• Demonstrated success leading initiatives driving compliance to regulated compliance (e.g., NIST, ITAR, or DFARS, GDPR, SOX)

• Demonstrated experience designing, influencing, and validating IT system architecture to meet compliance and data protection requirements

• Experience managing Governance, Risk, Compliance platform (e.g., Archer, ServiceNow, OneTrust)

• Experience leading or supporting internal and external audits, assessments, and corrective action programs

The selection of the person to be hired for this position is contingent on the candidate having export compliance eligibility for access to U.S. controlled technology which comes under the licensing jurisdiction of the U.S. Department of State, International Traffic in Arms Regulations (ITAR) and the U.S. Department of Commerce, Export Administration Regulations (EAR).

The candidate selected will have to qualify as either a U.S. citizen, a U.S. National, a lawful permanent resident of the U.S., a Person Admitted into the U.S. as an Asylee or Refugee., a National of a country that is not prohibited from having access to U.S. controlled technology (via a letter of assurance), or a Person to be approved for an export license by the governing agency whose technology