Global Cyber GRC Engineer: Risk & Compliance

Donaldson; BLOOMINGTON (MN); Hybrid; USD 86,200 - 111,000; Full time

Benefits offered by this job

Health benefits

401(k) retirement plan

Paid time off

Job summary

Donaldson is a leading filtration technology company hiring a Senior Engineer, Global Governance, Risk & Compliance (GRC) to advance enterprise risk management across its global operations. The role is based in Bloomington with a hybrid work schedule, collaborating with IT, Privacy, Legal, and Procurement to align with internal policies and regulatory requirements.

The position requires expertise in risk assessments, regulatory compliance, and third-party risk management, with a focus on ISO

Qualifications

• Minimum 5 years IT security and risk management experience.
• Experience evaluating controls against ISO 27001, NIST, or SOC 2.
• Strong written and verbal English communication to senior stakeholders.
• Knowledge of third-party risk management and regulatory requirements.

Responsibilities

• Lead the enterprise GRC risk tracking framework across global operations.
• Coordinate global risk review meetings with IT, business, and operational stakeholders.
• Assess, rate, and prioritize security risks against internal criteria, industry standards, and regulatory requirements.
• Compile and communicate risk posture to executive leadership and IT owners.
• Manage and facilitate risk assessments for new technologies, processes, and acquisitions.
• Improve risk assessment processes through alignment with IT architecture and Privacy.
• Lead compliance assessments against internal policies, standards, and procedures.
• Perform vendor and supplier security reviews, including third-party risk assessments.
• Review third-party attestations (SOC2) and support contract security provisions with Legal.
• Enhance vendor risk management processes and reporting.

Skills

Risk assessment

Regulatory compliance

Executive communication

Third-party risk management

IT controls

Frameworks (ISO/NIST/SOC2)

Education

Bachelor’s degree in Cybersecurity, IT, Risk Management, or related field

CISSP

CISM

CRISC

CISA

Tools

ServiceNow

Archer

Job description

Donaldson is a leading filtration technology company hiring a Senior Engineer, Global Governance, Risk & Compliance (GRC) to advance enterprise risk management across its global operations. The role is based in Bloomington with a hybrid work schedule, collaborating with IT, Privacy, Legal, and Procurement to align with internal policies and regulatory requirements.

The position requires expertise in risk assessments, regulatory compliance, and third-party risk management, with a focus on ISO