Global Cybersecurity, GRC & IAM Strategy Lead

Donaldson; Bloomington (IN); On-site; USD 158,000 - 211,000; Full time

Job summary

Donaldson is seeking a seasoned leader to head Global Cybersecurity Governance, Risk, Compliance & Identity. You will define and drive enterprise cybersecurity governance and risk across IT, OT, and product ecosystems, lead GRC and IAM/ICAM programs, and ensure alignment with regulatory requirements.

This on-site role anchors security across manufacturing and digital initiatives. You will build a high-performing security organization, develop KPIs, advise executive leadership on risk and

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Risk Management, or related field.
• 10+ years of progressive experience in cybersecurity, GRC, or identity management.
• Experience managing budgets and vendors, building multi-year roadmaps, and delivering measurable outcomes through program and portfolio management.
• Proven experience leading enterprise GRC functions.
• Strong working knowledge of NIST CSF, NIST 800-53, ISO 27001, and SOC frameworks.
• Experience with global regulatory and compliance programs (such as SOX, GDPR, PCI DSS, CMMC, TISAX).
• Experience collaborating with IAM and/or OT security leadership in large-scale environments.
• Professional certifications (such as CISSP, CISM, CRISC, or CISA).
• Demonstrated experience operating in complex, global organizations.
• This role is on-site at our world headquarters in Bloomington, MN

Responsibilities

• Integrate GRC, IAM, and OT security into a unified cybersecurity risk model.
• Support M&A due diligence and integration from a cybersecurity and compliance perspective.
• Develop, mentor, and retain a high-performing security operations organization, including hiring strategy, succession planning, performance management, and a culture of accountability and learning.
• Establish and maintain cybersecurity KPIs, KRIs, and dashboards.
• Advise leadership on risk, investment priorities, and regulatory exposure.
• Drive continuous improvement of the enterprise control environment.
• Direct leadership of the global GRC organization, including governance, risk management, compliance, and audit functions.
• Define and mature enterprise cybersecurity governance frameworks, policies, and standards.
• Own regulatory, legal, and customer-driven compliance programs (e.g., SOX, GDPR, CMMC, and TISAX).
• Oversee audits, regulatory engagements, and customer security assessments
• Deliver cyber risk reporting and board-facing materials
• Provide strategic oversight of the IAM/ICAM function, incl. identity lifecycle and privileged access using SailPoint ISC.
• Align IAM with Zero Trust and security strategy
• Drive identity risk through metrics, reporting, and control effectiveness
• Partner with IAM leadership to ensure scalable, compliant identity services
• Define, implement, and operate GenAI use within IAM landscape
• Provide strategic oversight of OT cybersecurity strategy and governance
• Appy consistent security controls and risk management practices across plants and labs

Skills

GRC leadership

IAM/ICAM

OT security

Budget & vendor mgmt

Strategic planning

Regulatory compliance

Zero Trust

Security metrics

Education

Bachelor's degree in Cybersecurity, CS, Engineering

CISSP, CISM, CRISC, or CISA

Tools

SailPoint ISC

ServiceNow

GRC platforms

Job description

Donaldson is seeking a seasoned leader to head Global Cybersecurity Governance, Risk, Compliance & Identity. You will define and drive enterprise cybersecurity governance and risk across IT, OT, and product ecosystems, lead GRC and IAM/ICAM programs, and ensure alignment with regulatory requirements.

This on-site role anchors security across manufacturing and digital initiatives. You will build a high-performing security organization, develop KPIs, advise executive leadership on risk and