Cybersecurity Risk and Compliance Manager

ASSA ABLOY Sicherheitstechnik GmbH; New Haven (CT); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Continuous professional development

Competitive compensation and benefits

Generous holiday schedule and PTO

Employee pricing and discounts

Job summary

ASSA ABLOY Sicherheitstechnik GmbH in New Haven, CT is seeking a senior cybersecurity leader to apply business acumen and transformation experience to strengthen our security posture. This on-site role focuses on governing cyber risk, building a risk-aware culture, and ensuring compliance across global operations.

You will collaborate with IT, legal, and HR to implement ISO27001 and NIST-based controls, develop dashboards, and report KRIs/KPIs to stakeholders while embedding information security

Qualifications

• Certified information security professional (CISM or CISSP) with 3+ years of global cybersecurity management experience.
• Experience implementing and operating ISMS in a large, globally represented organization.
• Strong knowledge of GDPR/CCPA/PCI-DSS and other regulatory demands.
• Excellent English communication and business language articulation.
• Ability to translate risks into actionable business decisions.

Responsibilities

• Establish divisional cyber risk governance.
• Build divisional risk management culture and methodologies.
• Maintain the divisional cyber risk register.
• Acquire knowledge of IT services and translate requirements into IT policies and controls.
• Establish and execute risk assessment and management with business functions.
• Create, modify, and implement divisional policies and directives based on ISO27001 and NIST.
• Develop dashboards and reports for stakeholders; monitor KRIs and KPIs.
• Collaborate with corporate counsels and HR to enforce standards and regulations.
• Review policies periodically to identify hidden risks or non-conformities.
• Evaluate and improve control systems to prevent violations.

Skills

Information security

Risk management

Policy governance

Regulatory compliance

Stakeholder communication

Education

CISM or CISSP certification

Job description

Are you looking for an opportunity to apply your business acumen, cybersecurity skills, and organizational transformation experience to help us create a more secure and open world? We are an innovative and growth-oriented global company that offers a collaborative environment where your ideas and contributions are welcomed. This is an on‑site position based in New Haven, CT.

Responsibilities

• Establish divisional cyber risk governance
• Build divisional risk management culture and methodologies
• Maintain the divisional cyber risk register
• Acquire a broad knowledge of IT services and collaborate closely with IT to transform business requirements into IT policies and controls
• Establish and execute risk assessment and management with business functions
• Build and maintain cyber risk and compliance reporting dashboards and reports for stakeholder groups
• Define, monitor, and report key risk indicators and relevant key performance indicators
• Create, modify, and implement divisional policies and directives based on ISO27001 and NIST standards
• Develop deep coalitions with business partners to embed information security into the policy framework
• Collaborate with corporate counsels and HR departments to monitor enforcement of standards and regulations
• Review policies periodically to identify hidden risks or non‑conformity issues
• Develop and oversee control systems to prevent or address violations of legal guidelines and internal policies
• Evaluate the efficiency of controls and continuously improve them

Qualifications

• Professional certification in Information Security (CISM or CISSP)
• Professional certification in CRISC or ISO27005 (preferred)
• Minimum three years of experience in a global cybersecurity management role
• Proven experience implementing and operating information security risk and compliance management in an organization of similar size and global representation
• Strong knowledge of current digital service delivery concepts, technology, and its cyber protection capabilities
• Good enterprise business knowledge and the ability to articulate risks in clear business language
• Knowledge of global regulatory compliance demands in the areas of privacy, industry, or governmental segments (GDPR, CCPA, PCI‑DSS, critical infrastructure, Patriot Act)
• Engaged, committed, creative, hands‑on, and self‑motivated personality
• Expert knowledge and proven success in implementing an Information Security Management System (ISMS) in an enterprise organization
• Analytical and conceptual ability to identify compliance risks and develop practical solutions and adjustments
• Excellent business and IT communication skills in English

Benefits

• Continuous professional development opportunities and an environment that fosters internal growth and mobility
• Competitive compensation and benefits package including multiple healthcare options, tuition reimbursement, and matching 401(k)
• Generous holiday schedule and paid time off to refresh and recharge
• Employee pricing on our products and discount programs for travel, entertainment, and more

ASSA ABLOY is an Equal Opportunity Employer/Minorities/Females/Disabled/Veteran.