Director, GRC: ISO27001, SOX & OT Risk Leadership

VanTran Industries, Inc.; Waco (TX); Sur place; USD 180 000 - 280 000; Plein temps

Résumé du poste

Forgent is seeking a hands-on Director, Governance, Risk & Compliance (GRC) to design and mature an enterprise GRC program across ISO 27001, SOX ITGC, SOC 2, and NIST CSF within a manufacturing context. You will lead a cross-functional team, work with IT, Finance, Legal, and Plant Operations, and report to the CISO.

You will own policy lifecycle, risk assessments, audit coordination, and program metrics, ensuring continuous compliance globally and guiding remediation across ERP and OT

Qualifications

• 7+ years progressive experience in IT Audit/Controls, or Enterprise Risk; 5+ years leading GRC programs in public companies.
• End-to-end ISO 27001 implementation experience (ISMS design through certification).
• SOX 404 ITGC ownership experience, including scoping, control design, testing, and remediation across ERP (e.g., SAP/Oracle) and key business applications.
• Demonstrated success in leading mixed teams of internal staff and vendor/consultants, including multi-site and global operations.
• Manufacturing/OT exposure:ICS/SCADA risk management, plant-floor realities (safety, uptime, maintenance windows).
• Hands-on with GRC platforms, IAM, CMDB, SIEM/SOAR, vulnerability management, and evidence repositories.
• Strong familiarity with NIST CSF, CIS Controls, and control mapping across frameworks.

Responsabilités

• Establish and mature the enterprise GRC program aligned to ISO 27001, SOX, SOC 2, NIST CSF, CIS Controls and relevant regulatory requirements.
• Own the Information Security Management System (ISMS) lifecycle: scope definition, risk assessment, SoA, control implementation, internal audit, management review, corrective actions, and surveillance/recertification readiness.
• Define and maintain policies, standards, and procedures (e.g., access control, change management, vulnerability management, secure SDLC, incident response, supplier security).
• Chair/coordinate governance forums (e.g., Risk & Compliance Steering Committee, Change Advisory Board, Management Review meetings).
• Plan and execute internal audits (ISO 27001, policy compliance, control effectiveness) and coordinate external audits (SOX, ISO surveillance/certification, PCI, etc.).
• Build defensible control evidence repositories, ensure sampling precision, and drive timely remediation of findings.
• Develop and maintain control libraries, test plans, and mapping across frameworks (ISO, NIST, SOX ITGC etc.).
• Select, implement, and administer GRC platforms (e.g., Archer/Drata/Vanta, ServiceNow GRC/IRM, OneTrust) and integrate with ticketing, IAM, CMDB, SIEM, and ERP (e.g., SAP/Oracle).
• Operationalize continuous control monitoring (CCM) and control analytics (e.g., access outliers, change exceptions, segregation of duties conflicts).
• Define and publish KPIs/KRIs and Board/C-suite dashboards: audit status, control effectiveness, residual risk, TPRM posture, policy adoption, incident trends.

Connaissances

Executive communication

Stakeholder management

Risk quantification

Analytical & documentation excellence

Change leadership

Board-level reporting

Manufacturing agility

Formation

Bachelor's degree in Information Systems / Computer Science / Engineering / Accounting / Finance

MBA or MS Information Assurance (preferred)

Outils

Archer/Drata/Vanta

ServiceNow GRC/IRM

OneTrust

IAM

CMDB

SIEM/SOAR

Description du poste

Forgent is seeking a hands-on Director, Governance, Risk & Compliance (GRC) to design and mature an enterprise GRC program across ISO 27001, SOX ITGC, SOC 2, and NIST CSF within a manufacturing context. You will lead a cross-functional team, work with IT, Finance, Legal, and Plant Operations, and report to the CISO.

You will own policy lifecycle, risk assessments, audit coordination, and program metrics, ensuring continuous compliance globally and guiding remediation across ERP and OT