Information Security Engineer, GRC

Compliance Officer Jobs; Fountain Inn (SC); On-site; USD 110,000 - 170,000; Full time

Job summary

Kyocera-AVX in Greenville, Fountain Inn, South Carolina, is seeking an Information Security Engineer focused on GRC. This full-time role requires expertise in governance, risk management, and compliance to support an enterprise security program.

You will drive policy, risk assessments, vendor risk, and audit readiness, collaborating with IT and security teams to sustain control health and regulatory compliance. Strong communication is essential for executive reporting and stakeholder updates.

Qualifications

• Bachelor's degree required; 10+ years in information security, GRC, or compliance roles.
• Experience with NIST CSF/800-53/171, CIS and ISO 27001.
• Hands-on risk, control assessments, and audit response experience.

Responsibilities

• Design, implement, audit, and maintain GRC controls aligned to NIST, CIS, ISO 27001.
• Drive policy development, risk assessments, third-party risk, and audit readiness.
• Test controls, document gaps, and track remediation to closure.
• Collaborate with vendors to review SOC/ISO artifacts and evidence.
• Assist with control implementation in IT/SecOps (access, logging, encryption, backup).
• Produce dashboards and executive risk/status reports for stakeholders.

Skills

GRC governance

Risk assessment

Regulatory compliance

Executive reporting

Vendor risk management

Education

Bachelor's degree

Master's degree or advanced certification

Tools

Archer

ServiceNow GRC

OneTrust

RSA

Job description

Information Security Engineer, GRC

KYOCERA AVX Greenville Fountain Inn, South Carolina, United States Full-time 5 days ago

Design, implement, audit, and maintain governance, risk management, and compliance (GRC) controls for the organization’s information security program aligned to the National Institute of Standards and Technology (NIST), the Center for Internet Security (CIS), and the International Organization for Standardization (ISO) 27000 family of frameworks. Drive policy, risk assessments, third party risk, audit readiness, and continuous compliance with regulatory and industry standards, using an organized and project managed approach.

• Governance, policy & control design: Maintain policies/standards; map obligations to NIST CSF, NIST SP 800-53/800-171, CIS, and ISO 27001; define testable controls, procedures, and evidence requirements.
• Risk management & exceptions: Conduct risk assessments; document scenarios and residual risk; maintain risk register, compensating controls, and remediation plans; support exception/acceptance decisions with rationale and evidence.
• Compliance & audit readiness: Test controls (design/operating effectiveness), document gaps, assemble audit evidence, and track findings to validated closure.
• Third-party risk: Assess vendor security (questionnaires, SOC/ISO artifacts, evidence review), document risk and required controls/terms, and drive remediation follow-ups.
• Control implementation support & monitoring: Partner with IT/SecOps to implement and run controls (access, logging, vuln mgmt, encryption, backup/DR) and define monitoring, evidence sources, and test cadence.
• Metrics & stakeholder communication: Produce dashboards and brief status reports on risk, control health, audit readiness, and remediation aging for technical and non-technical stakeholders.
• Operational support & enablement: Provide GRC support for incidents/vulnerabilities and privacy obligations; publish practical guidance (standards, job aids, FAQs) to increase control adoption and reduce exceptions.

Required Qualifications

• Bachelor's degree
• 10+ years experience in information security, including GRC, or risk/compliance roles.
• Demonstrated experience with NIST frameworks (NIST CSF, NIST SP 800-53, NIST RMF, NIST SP 800-171), CIS 8.1, and ISO 27001.
• Hands-on experience conducting risk assessments, control assessments, and audit responses.
• Experience with regulatory requirements relevant to the organization (e.g., CMMC, TISAX, CTPAT, GDPR, IATF).
• Strong communication skills; experience producing executive-level reporting.
• Experience with GRC tooling (e.g., Archer, ServiceNow GRC, OneTrust, RSA) and security monitoring platforms.

Preferred Qualifications

• Master’s degree or relevant advanced certification.
• Certifications: CISSP, CISM, CRISC, CGEIT, or equivalent.
• Experience with cloud security (AWS/Azure/GCP) controls and cloud compliance frameworks.

Kyocera-AVX is an Equal Opportunity Employer: All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or status as a protected veteran.