InfoSec GRC Leader: Risk, Compliance & Audits

Signet Jewelers Limited; Akron (OH); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare

401(k) matching

Paid time off

Employee discounts

Learning & development

Other benefits

Job summary

Signet Jewelers Limited is hiring an Information Security GRC Manager in Akron, OH. Hybrid work arrangement, leading governance, risk, and compliance initiatives aligned with regulatory requirements and business goals.

The role requires 10+ years in information security, IT risk, or compliance, with 2–3+ years in a GRC-focused position and experience with SOX and PCI ITGC controls, plus familiarity with key frameworks.

Qualifications

• Bachelor’s degree or higher in information security, cybersecurity, computer science, business, or related field.
• 10+ years in information security, IT risk, or compliance with 2–3+ years in a GRC-focused role.

Responsibilities

• Plan and execute compliance readiness and certification assessments (e.g., SOX, PCI-DSS, NIST CSF, ISO 27001).
• Serve as the primary point of contact for external assessors and auditors.
• Coordinate internal and external audits and SOX-related security controls where applicable.
• Lead enterprise risk assessments, including identification, analysis, prioritization, and remediation of security risks.
• Define and monitor KRIs and KPIs to drive risk-based decisions across stakeholders.
• Track remediation activities, ensuring timely closure and proper documentation.
• Partner with IT, Legal, Privacy, and business teams to embed security and compliance into operations.
• Provide regular reporting on risk posture, compliance status, and program maturity to senior leadership.

Skills

GRC

Risk assessment

Regulatory compliance

Audit management

Cross-functional leadership

Communication

Education

Bachelor’s degree in Information Security or related field

Tools

Optro (AuditBoard)

ServiceNow GRC

OneTrust

Job description

Signet Jewelers Limited is hiring an Information Security GRC Manager in Akron, OH. Hybrid work arrangement, leading governance, risk, and compliance initiatives aligned with regulatory requirements and business goals.

The role requires 10+ years in information security, IT risk, or compliance, with 2–3+ years in a GRC-focused position and experience with SOX and PCI ITGC controls, plus familiarity with key frameworks.