Global GRC Engineer – Cybersecurity & Compliance Lead

Donaldson Company; BLOOMINGTON (MN); Hybrid; USD 86,200 - 111,000; Full time

Job summary

Donaldson Company is seeking a Senior Engineer, Global Governance, Risk & Compliance (GRC) to advance enterprise risk management and compliance across global operations. This hybrid role based in Bloomington leads risk tracking, assessment, and reporting, coordinating with IT, Privacy, Legal, Procurement, and business stakeholders to align with policies and regulatory requirements.

The Senior Engineer will drive risk assessment execution, improve visibility of enterprise risk to leadership, and

Qualifications

• Minimum 5 years IT and information security experience focusing on IT controls, risk management, data protection, and technology compliance.
• Experience conducting risk assessments and evaluating controls against ISO 27001, NIST, or SOC2.
• Ability to communicate technical risks to business/exec stakeholders in English.
• Strong understanding of third-party risk management and regulatory compliance requirements.

Responsibilities

• Lead and maintain the enterprise GRC risk tracking framework.
• Coordinate global risk review meetings with IT, business, and operational stakeholders.
• Assess, rate, and prioritize security risks against internal criteria, industry standards, and regulatory requirements.
• Compile and communicate risk posture to executive leadership and IT owners.
• Manage risk assessments for new technologies, processes, and acquisitions.
• Improve risk assessment processes through alignment with IT architecture and Privacy.
• Lead compliance assessments against internal policies and standards.
• Perform vendor and supplier security reviews, including third-party risk assessments.
• Review third-party attestations (e.g., SOC2) and support vendor risk management reporting.

Skills

IT controls

Risk management

Data protection

Regulatory compliance

Vendor risk management

Communication

ISO 27001

NIST

SOC 2

Security certifications

Education

Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or related field

Tools

ServiceNow

Archer

GRC platforms

Job description

Donaldson Company is seeking a Senior Engineer, Global Governance, Risk & Compliance (GRC) to advance enterprise risk management and compliance across global operations. This hybrid role based in Bloomington leads risk tracking, assessment, and reporting, coordinating with IT, Privacy, Legal, Procurement, and business stakeholders to align with policies and regulatory requirements.

The Senior Engineer will drive risk assessment execution, improve visibility of enterprise risk to leadership, and