InfoSec GRC Manager: Compliance & Risk Strategy

Signet Jewelers; United States; Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Healthcare, dental, vision

401(k) matching

Paid time off + 7 holidays

Discounts on merchandise

Learning & Development

Job summary

Signet Jewelers is seeking an Information Security GRC Manager to lead governance, risk, and compliance across the enterprise. This remote role focuses on aligning security policies with SOX, PCI-DSS, NIST CSF, ISO 27001 and other regulatory requirements while coordinating audits.

You will partner with IT, Legal, Privacy, and business teams, develop KRIs/KPIs, report to senior leadership, and drive improvements in control effectiveness and assurance programs.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, CS, Business, or related field.
• 10+ years in information security, IT risk, or compliance with 2–3+ years in a GRC role.
• Strong knowledge of frameworks (NIST, ISO 27001, COBIT).
• Experience managing assessments with regulators and external assessors.
• Ability to manage multiple initiatives and remediation efforts.

Responsibilities

• Plan and drive compliance readiness and certification assessments.
• Serve as primary contact for external assessors and auditors.
• Ensure ongoing regulatory and contractual compliance.
• Coordinate internal and external audits including SOX controls.
• Lead enterprise risk assessments and mitigate security risks.
• Define KRIs and KPIs; drive risk-based decisions.
• Report risk posture and program maturity to leadership.
• Track remediation activities and document outcomes.
• Drive continuous improvement of control effectiveness and assurance processes.
• Partner with IT, Legal, Privacy, and business teams to embed security and compliance into operations.

Skills

Audit management

Risk assessment

Regulatory compliance

Cross-functional collaboration

Leadership

Written verbal communication

Education

Bachelor’s degree in Information Security, Cybersecurity, CS, Business, or related field

Tools

Optro/AuditBoard

ServiceNow GRC

OneTrust

Job description

Signet Jewelers is seeking an Information Security GRC Manager to lead governance, risk, and compliance across the enterprise. This remote role focuses on aligning security policies with SOX, PCI-DSS, NIST CSF, ISO 27001 and other regulatory requirements while coordinating audits.

You will partner with IT, Legal, Privacy, and business teams, develop KRIs/KPIs, report to senior leadership, and drive improvements in control effectiveness and assurance programs.