GRC Manager: IT Compliance & Risk Leader

Harley-Davidson Motor Company; Juneau, Northern (AK, KY); Hybrid; USD 138,000 - 221,000; Full time

Benefits offered by this job

Annual bonus program

Health insurance

401(k)

Onsite fitness center

Employee discounts

Job summary

Harley-Davidson Motor Company in Juneau seeks a Manager of Governance, Risk and Compliance to lead global IT compliance and information risk management. The role reports to CISO and coordinates IT controls, audits, and regulatory requirements.

You will partner with IT leadership, design risk frameworks, oversee SOX, COBIT, NIST CSF, and PCI/DSS related controls, and drive issues to closure across regions. A strong background in enterprise GRC and leadership is essential.

Qualifications

• High School Diploma or Equivalent Required
• Bachelor's Degree in business management or information systems
• Master's Degree preferred
• CISA certification preferred
• CISSP certification preferred
• Typically requires a minimum of 8 years of related experience
• Experience with SOX/COBIT/NIST CSF/SOC 1 and 2/PCI DSS

Responsibilities

• Build and maintain strong business partnerships at a senior leadership level
• Develop and implement processes to map IT general controls to GRC standards
• Oversee audit testing of IT controls and guide management action plans
• Manage secure HR/Legal/Ethics IT/Security-related investigations
• Identify IT security risks and ensure remediation resources are allocated

Skills

Leadership

Communication

Process Management

GRC Frameworks

Auditing

Education

Bachelor's degree in business management or information systems

Master's degree preferred

CISA

CISSP

Job description

Harley-Davidson Motor Company in Juneau seeks a Manager of Governance, Risk and Compliance to lead global IT compliance and information risk management. The role reports to CISO and coordinates IT controls, audits, and regulatory requirements.

You will partner with IT leadership, design risk frameworks, oversee SOX, COBIT, NIST CSF, and PCI/DSS related controls, and drive issues to closure across regions. A strong background in enterprise GRC and leadership is essential.