Information Governance Leader - GM Defense

Description

GM Global Law & Policy is seeking a dynamic, creative, and business-minded Information Governance (IG) Leader to support GM Defense. The ideal candidate will combine deep subject matter expertise-especially in CMMC, CUI, and Industrial Security-with the ability to design practical, scalable, and user-friendly solutions. This leader will partner with internal and external stakeholders to solve complex IG challenges, advocate for reasonable compliance approaches, and position the IG team as a trusted advisor and business enabler. The successful candidate will be seen as a go-to resource for solving the organization's most complex IG challenges, fostering a reputation for practical solutions and business partnership

Key Responsibilities

• Strategic Leadership: Define and execute a forward-thinking IG strategy that meets business agility requirements compliantly. Champion creative, risk-based approaches that enable growth, simplify compliance, and deliver value to both the business and its customers. Lead organizational compliance with CUI, CMMC, and Industrial Security (NISPOM, OPSEC) by partnering with security, IT, legal, and program management teams.
• Thought Leadership: Serve as a thought leader on IG, staying ahead of regulatory trends and emerging risks, and proactively shaping the organization's approach to CMMC, CUI, and related domains.
• Customer Partnership & Advocacy: Engage directly with customers and government stakeholders to understand their needs, advocate for practical and reasonable compliance solutions, and push back-professionally and constructively-on requirements that are unnecessarily burdensome or misaligned with business objectives.
• Process Design & Usability: Design and implement IG processes that are intuitive, efficient, and easy for internal and external customers to adopt, ensuring compliance is never a barrier to business success. Establish and maintain IG policies, standards, and procedures to ensure the secure handling, storage, transmission, and destruction of sensitive data.
• Audit & Assessment Management: Oversee internal and external audits, compliance assessments, and self-inspections to ensure readiness for government and third-party reviews.
• Training & Awareness: Develop and deliver organization-wide training programs to raise awareness and promote a strong culture of security and compliance.
• Team Leadership: Inspire and mentor a high-performing IG team, fostering a culture of innovation, continuous learning, and customer-centricity.

• Education: Bachelor's degree in Information Security, Cybersecurity, Information Management, or a related field is preferred.
• Experience: 15+ years of progressive experience in information governance, cybersecurity, or regulatory compliance, with demonstrated depth in CMMC, CUI, Industrial Security/NISPOM, and related frameworks. Experience advocating for practical compliance solutions and influencing customer and stakeholder expectations is highly valued.
• Skills: Demonstrated ability to think creatively, challenge the status quo, and design user-centric processes. Strong negotiation and influencing skills, with a track record of building trust and credibility with both internal teams and external customers. Strong written and oral communication skills, commitment to integrity and inclusiveness, financial acumen, and exceptional organizational, analytical, and interpersonal skills.
• Additional Requirements: Experience in maintaining GM Defense CUI (Controlled Unclassified Information) Policy & Regulatory Compliance, managing OPSEC (Operations Security) compliance framework, and ensuring National Industrial Security Program (NISP) compliance.