Global IT Security & Risk Lead

Owens Corning; Toledo (OH); On-site; USD 100,000 - 130,000; Full time

Job summary

Owens Corning Foundation seeks an IT Security Lead - Risk Management to oversee cybersecurity governance and compliance operations. This critical role requires expertise in performing risk assessments, maintaining security policies, and executing compliance initiatives. Ideal candidates possess strong analytical skills and a deep understanding of security frameworks, including ISO 27001.

This position focuses on identifying and managing cybersecurity risks across projects and programs, ensuring alignment with governance expectations. Prior experience in information security and regulatory compliance is essential for success.

Qualifications

• Bachelor’s degree in computer science, Information Systems, Information Technology; equivalent experience may be considered.
• 5+ years of information security experience required.
• 3+ years in governance, risk, and compliance functions.

Responsibilities

• Maintain strong awareness of evolving security standards and assess their impact.
• Support internal control reviews and external audit coordination.
• Track risk remediation activities and status.

Skills

Analytical skills

Documentation skills

Problem-solving skills

Communication skills

Knowledge of security controls

Project management

Operational execution

Education

Bachelor’s degree in computer science or related fields

Tools

ISO 27001

Job description

Owens Corning Foundation seeks an IT Security Lead - Risk Management to oversee cybersecurity governance and compliance operations. This critical role requires expertise in performing risk assessments, maintaining security policies, and executing compliance initiatives. Ideal candidates possess strong analytical skills and a deep understanding of security frameworks, including ISO 27001.

This position focuses on identifying and managing cybersecurity risks across projects and programs, ensuring alignment with governance expectations. Prior experience in information security and regulatory compliance is essential for success.