InfoSec GRC Manager (Hybrid)

Signet Jewelers Limited; Akron (OH); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare

401(k) matching

Paid time off

Employee discounts

Learning & development

Other benefits

Job summary

Signet Jewelers Limited is hiring an Information Security GRC Manager in Akron, OH. Hybrid work arrangement, leading governance, risk, and compliance initiatives aligned with regulatory requirements and business goals.

The role requires 10+ years in information security, IT risk, or compliance, with 2–3+ years in a GRC-focused position and experience with SOX and PCI ITGC controls, plus familiarity with key frameworks.

Qualifications

• Bachelor’s degree or higher in information security, cybersecurity, computer science, business, or related field.
• 10+ years in information security, IT risk, or compliance with 2–3+ years in a GRC-focused role.

Responsibilities

• Plan and execute compliance readiness and certification assessments (e.g., SOX, PCI-DSS, NIST CSF, ISO 27001).
• Serve as the primary point of contact for external assessors and auditors.
• Coordinate internal and external audits and SOX-related security controls where applicable.
• Lead enterprise risk assessments, including identification, analysis, prioritization, and remediation of security risks.
• Define and monitor KRIs and KPIs to drive risk-based decisions across stakeholders.
• Track remediation activities, ensuring timely closure and proper documentation.
• Partner with IT, Legal, Privacy, and business teams to embed security and compliance into operations.
• Provide regular reporting on risk posture, compliance status, and program maturity to senior leadership.

Skills

GRC

Risk assessment

Regulatory compliance

Audit management

Cross-functional leadership

Communication

Education

Bachelor’s degree in Information Security or related field

Tools

Optro (AuditBoard)

ServiceNow GRC

OneTrust

Job description

We have many opportunities available on our other career site pages. Click here to link to our careers page!Signet Jewelers is the world's largest retailer of diamond jewelry, operating more than 2,800 stores worldwide under the iconic brands: Kay Jewelers, Zales, Jared, H.Samuel, Ernest Jones, Peoples, Banter by Piercing Pagoda, Rocksbox, JamesAllen.com and Diamonds Direct. We are a people-first company and this core value is at the heart of everything we do, from empowering our valued team members, to collaborating with our customers, to fostering the communities in which we live and serve. People – and the love their actions inspire – are what drive us. We’re not only proud of the love we inspire outside our walls, we’re especially proud of the diversity, inclusion and equity we’re inspiring inside. There are dynamic career paths awaiting you – rewarding opportunities to impact the lives of others and inspire love. Join us!InfoSec GRC ManagerLocation: Akron, OH (Hybrid)POSITION SUMMARY:The Information Security GRC Manager is responsible for leading the organization’s governance, risk management, and compliance initiatives related to information security. This role ensures that security policies, standards, and controls align with regulatory requirements and business objectives, while effectively managing risk across the enterprise.RESPONSIBILITIES:Plan and execute compliance readiness, and certification assessments (e.g., SOX, PCI-DSS, NIST CSF, ISO 27001)Serve as the primary point of contact for external assessors and auditorsEnsure ongoing compliance with applicable regulatory and contractual requirementsCoordinate internal and external audits, including SOX-related security controls where applicableLead enterprise risk assessments, including identification, analysis, prioritization, and mitigation of security risksDefine and monitor Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)Drive risk-based decision-making across security and business stakeholdersTrack remediation activities, ensuring timely closure and proper documentationDrive continuous improvement of control effectiveness and assurance processesPartner with IT, Legal, Privacy, and business teams to embed security and compliance into operationsProvide regular reporting on risk posture, compliance status, and program maturity to senior leadershipMaintain and evolve security policies, standards, procedures, and risk methodologiesDevelop, maintain, and continuously enhance the enterprise information security governance frameworkDevelop and deliver security awareness programs related to risk and compliancePromote a strong culture of security and accountability across the organizationPOSITION QUALIFICATIONS:Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Business, or related field10+ years of experience in information security, IT risk, or compliance, with 2–3+ years in GRC-focused roleStrong knowledge of industry frameworks and standards (e.g. NIST, ISO 27001, COBIT)Proven experience managing assessments and working with external regulators and assessorsDemonstrated ability to manage multiple concurrent initiatives and remediation effortsPreferred Certifications:Experience implementing and maturing cybersecurity compliance programsRelevant certifications (e.g., CISSP, CISM, CRISC, CISA)Experience with SOX and PCI ITGC controls and audit coordinationFamiliarity with GRC tools (e.g., Optro (AuditBoard), ServiceNow GRC, OneTrust)Key Skills:Audit management and coordinationRisk assessment and mitigationRegulatory compliance managementCross-functional collaborationLeadership and team managementStrong written and verbal communicationBENEFITS & PERKS:Comprehensive healthcare, dental, and vision insurance to keep you and your family covered that is active on day 1 of employmentGenerous 401(k) matching after just one year to help secure your financial futureAmple paid time off, plus seven holidays to recharge and unwindExclusive discounts on premium merchandise just for youDynamic Learning & Development programs to support your growthAnd more!