Sr. Manager, GRC

Who We Are:

At Avnet, relationships matter. We are a global, FORTUNE  500 technology distributor and solutions company that delivers design, supply chain and logistics expertise to customers at every stage of a product’s lifecycle. Our employees have a front row seat to the latest innovations shaping the world we live in and the future we share. We’re driven to help our customers around the world succeed and we do so by earning the trust of some of the biggest names in technology.

Working at Avnet means being a part of a global team. We work collaboratively and with integrity, doing business the right way. For more than a century, we have partnered together to help our customers, suppliers and teammates realize the transformative possibilities of technology. Experience what’s next at Avnet!

Job Summary:

The Cybersecurity Senior Manager plays a critical leadership role within the enterprise cybersecurity organization, overseeing governance, risk, and compliance (GRC) functions across a complex, global environment. This role is accountable for ensuring cybersecurity risks are identified, assessed, managed, and reported in alignment with business objectives, regulatory requirements, and the organization’s risk appetite. The Cybersecurity Senior Manager collaborates closely with business leaders, IT, Legal, Internal Audit, Procurement, and external auditors to integrate security and compliance into everyday operations while supporting business scalability and agility.

Principal Responsibilities:

Cyber and IT Compliance Lead enterprise cybersecurity and IT compliance programs, including SOX ITGCs & Application controls, PCI DSS, CMMC, and other applicable regulatory and contractual requirements.

Design, implement, and maintain continuous control monitoring processes to validate the effectiveness of cybersecurity and IT controls on an ongoing basis.

Translate regulatory and compliance requirements into practical, scalable control expectations aligned to enterprise architecture and operational realities.

Proactively identify compliance gaps, assess risk, and drive remediation plans in partnership with control owners.

Periodically assess against NIST CSF and other cybersecurity frameworks.

Audit Liaison Management Own and manage the Audit Liaison function for cybersecurity and IT risk, serving as the primary interface between the company and external auditors, assessors, and regulators.

Support control owners by raising awareness of compliance requirements, assisting with controls design, and serving as primary interface between Global Audit and audited IT teams. Support Global Audit and external auditors in audit planning, evidence collection, walkthroughs, and issue response across global teams.

Ensure audit findings are clearly understood, risk-ranked, and translated into actionable remediation plans with accountable owners and timelines.

Track and report status of remediation action plans.

Drive consistency and quality in audit responses, reducing friction and repeat findings year over year.

Contract Reviews and Business Enablement Lead the cybersecurity portion of contract reviews in support of all business units, evaluating customer, partner, and supplier cybersecurity requirements.

Partner with Legal, Sales, Procurement, and Business Leaders to assess contractual risk, negotiate security terms, and ensure commitments align with the company’s cybersecurity capabilities and risk tolerance.

Provide clear guidance on acceptable risk positions and required controls to enable informed business decisions without unnecessary delays.

Facilitate Technical and Organizational Measures (TOMs) review requirements of GDPR during business vendor selection process by coordinating teams to complete the non-cyber portion of the reviews and providing a risk assessment for the cybersecurity component of TOMs. Provide the complete assessment report and final risk rating to the Business. Provide assistance to the Business to interpret the risk rating and possible options to mitigate the risks, if required.

Answer Customer’s request for information (RFIs) by completing the cybersecurity portions of RFIs and gathering responses for…