Manager, Information Security Governance and Compliance

EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products.

Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow.

Candidates must be willing to participate in at least one in-person interview.

This role resolves operational friction between technical engineering units and business leadership by establishing an accountable, people-focused GRC team. The position eliminates organizational silos and misaligned priorities by facilitating collaborative diplomacy and translating complex compliance mandates into practical operational workflows. Additionally, the role prevents regulatory exposure and compliance drift across frameworks like PCI-DSS and NYDFS through proactive audit leadership, structured policy governance, and targeted workforce education.

• Mentor, develop, and lead a dedicated team of GRC professionals to achieve departmental OKRs and sustain operational excellence.
• Direct the team in executing continuous monitoring and annual certification lifecycles for PCI-DSS, NYDFS, CCPA, and emerging statutory standards.
• Serve as the primary escalation leader for audit oversight, driving remediation accountability across cross-functional engineering and operational units.
• Oversee the enterprise policy lifecycle and formal exceptions architecture, ensuring controls reflect changing regulatory requirements and threat vectors.
• Guide the deployment of an enterprise-wide security awareness initiative and specialized training tracks tailored to high-risk roles.
• Partner with peer security leaders to introduce AI-first governance workflows that automate routine compliance tasks and increase team productivity.

• Proven people leadership skills to coach compliance professionals, foster accountability, and guide career development.

• Collaborative diplomacy, exceptional written communication, and executive presence to translate complex risk topics into clear business decisions for non-technical stakeholders.

• Strong functional expertise in regulatory framework governance, statutory compliance management, and formal audit defense.

• Demonstrated ability to build policy governance models, evaluate horizon regulatory changes, and implement scalable exception workflows.

• AI Application skills to direct team adoption of AI-enabled compliance tools and automated governance workflows.

• Critical experience leading GRC teams through complex audits and regulatory oversight within large-scale or highly regulated environments.

• Familiarity with NIST CSF or CIS Controls frameworks

• Active professional certifications such as CISM, CISA, or CRISC

• Background in telecommunications or high-growth technology environments

• Minimum Education: Bachelor’s degree in a related field

• Minimum Experience: 6 years of experience in Cybersecurity GRC, including at least 2 years in a management or lead capacity within a large-scale or regulated environment

• Required Technical Skills: Must have at least 3 years of direct experience with:

  • PCI-DSS audit and certification execution

  • NYDFS compliance implementation

  • Cybersecurity risk management and governance framework administration

Visa sponsorship is not available for this role.

We offer versatile health perks, including flexible spending accounts, HSA, a 401(k) Plan with company match, ESPP, career opportunities, and a flexible time away plan; all benefits can be viewed here: EchoStar Benefits.

The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies; compensation is based on the role's location and is subject to change based on work location. 

Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.

The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.

We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.
EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make echostar.com and jobs.echostar.com accessible to users. Please contact [email protected] if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.
Click the links to access the following statements: EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English/Spanish)