Manager, Risk, Compliance and Governance

Are you passionate about strengthening technology risk and compliance while helping a business move forward with confidence? Join our Enterprise Technology organization and help shape how we manage cybersecurity risk, strengthen compliance, and build resilient technology practices across the enterprise. This position is in Richmond, VA with a hybrid work schedule. Relocation benefits will be provided.

As Manager, Risk, Compliance and Governance, you’ll serve on the cybersecurity team, coordinating closely with Business Information Security Officers, IT Risk Management, Corporate Audit, and technology control owners. You’ll play a substantial role in advancing IT compliance strategies. You will support SOX and other regulatory controls. You will strengthen oversight of disaster recovery processes and help ensure our technology environment meets evolving security and compliance expectations.

What you will be doing:

• Partnering with control owners to build, update, and implement controls across applicable domains, including AI, PII, SOX, PCI, and HIPAA.
• Assessing compliance frameworks and strategies to align digital risk management and regulatory oversight practices with the company’s business strategy.
• Establishing and maintaining disaster recovery governance, including the completeness and accuracy of disaster recovery plans, procedures, and supporting documentation.
• Validating business impact assessments for applications across the Altria environment and supporting technology resiliency and disaster recovery preparedness.
• Conducting technical control, compliance, and resiliency assessments to evaluate the effectiveness of controls designed to protect systems and data.
• Building and leading all aspects of compliance and control metrics, dashboards, standards, patterns, and guidelines that support portfolio delivery and provide significant insights to senior leaders.
• Partnering with Corporate Audit and audit liaison functions to support remediation of internal and external audit management action plans and minimize findings.

We want you to have:

• Bachelor’s degree in an IT-related field or equivalent relevant experience.
• 8+ years of information technology experience specializing in security control selection and validation, security assessments, system accreditation, auditing, or technology architecture.
• Demonstrated proficiency with current IT technologies and their application within security, risk, and compliance environments.
• Hands-on knowledge of NIST 800-series guidelines, including the Developing Cyber-Resilient Systems (NIST SP 800-160) and NIST Cyber Security Framework 2.0.
• Experience with Plan of Action and Milestones (POA&M), vulnerability and patch management, and risk management.
• Knowledge of industry-specific compliance standards, including Sarbanes-Oxley (SOX), SEC, HIPAA, and PCI DSS requirements, as they relate to information systems and associated control testing.

The starting salary is based on but not limited to experience, knowledge, and qualifications in determining compensation decisions. The Salary Range for this position is: $119,600.00 - $173,450.00.

Why You’ll Love Building Your Career at Altria

At Altria, we believe a great career starts with feeling supported — both at work and in life. Here’s what you’ll find here:

• Work where connection and flexibility meet — enjoy the benefits of in-person collaboration three days a week (Tuesday - Thursday), while maintaining the flexibility to work remotely on Mondays and Fridays. Our hybrid approach empowers you to stay connected, collaborate with colleagues, and manage your schedule in a way that works best for you.
• Own your time — start with 15 days of paid time off, 13 paid holidays, 2 floating holiday days, and a 37.5-hour workweek so you can recharge and live fully.
• A place where you belong — where your ideas are welcomed, your growth is encouraged, and your impact is real.
• Get recognized for your work — annual merit increases and performance bonus.
• A future you can count on — 401(k) matching from day one; plus Deferred Profit Sharing, an annual company contribution in an amount equal to 13%–17% of your base salary.
• Help with your goals — get help with student loan repayment assistance, attend a conference, or gain a new certification with professional development stipends.
• Support for what matters most — comprehensive medical, dental, and vision coverage for you and your family.
• Celebrating your milestones — paid parental and bonding leave for life’s biggest moments.
• Wellness that goes beyond work — programs that care for your whole well-being at whatever stage you are in your life.
• A culture that gives back — paid volunteer days and a shared commitment to making a difference.

At Altria, we offer more than benefits — we offer a career that fits your life, rewards your ambition, and celebrates your impact.

This position is not eligible for sponsorship.