InfoSec GRC - Senior Manager

ABB; Cary (NC); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Health & life insurance

401k with company contributions

Employee stock purchase plan

Paid holidays

Job summary

ABB i Cary, NC söker en erfaren ledare inom informationssäkerhet och riskhantering som kan etablera och driva governance, compliance och operativa processer över regionen.

Du blir serviceägare för säkerhets- och efterlevnadsprogram, leder tvärfunktionella team och rapporterar till senior ledning. Våra fokusområden inkluderar ISO 27001, NIST 800-53 och CMMC samt “security by design” i projekt.

Qualifications

• Bachelors or Master’s degree in Information Technology, Computer Science, Software Engineering, or related qualification.
• 15+ years of Information Security experience with at least 10 years in governance, risk, projects and communications.
• Experience in security governance and risk from design to maintenance.
• Strong knowledge of ISO 2700x, NIST 800-53, CMMC.
• Experience defining and running compliance-as-a-service capabilities (CMMC post-certification).
• Excellent leadership skills for distributed teams; stakeholder management.
• Knowledge of IT risk assessment, IT Audit, and IS technologies.
• Project Management experience.
• Security Certifications (CISSP, CISM, CRISC) and/or ISO 27001 auditor / CISA.
• Excellent written and verbal communication; ability to present to senior management.
• US work authorization is required.

Responsibilities

• Act as service owner and transition to sustainable compliance service with ongoing control ownership.
• Design and oversee governance frameworks across EL Security, Risk & Compliance teams.
• Maintain a Security & Compliance dashboard with risk metrics and attestations.
• Govern security project design and delivery aligned with risk guidance and security by design.
• Oversee implementation of security controls across EL assets and countries.
• Contribute to IS SRC Roadmap and provide security posture reports to leadership.
• Establish risk-focused metrics and maintain policies aligned with ABB regulations.
• Coordinate multi-country compliance with IS compliance teams and audits.
• Drive continuous security service improvement and address audit findings.

Job description

På ABB hjälper vi industrier att bli mer resurseffektiva och renare – och varje person här bidrar till resultaten. Du kommer att få möjlighet att leda, få stöd att växa och kunna vara stolt över den påverkan vi skapar tillsammans. Gå med oss och hjälp till att driva det som driver världen.

Denna position rapporterar till:

Head of IS Security, Risk and Compliance

Your role and responsibilities

In this role, you will have the opportunity to establish and maintain operational methods, service compliance, and procedures. Each day, you will be responsible for planning, design, implementation and continuous improvement within governance, compliance, assurance, and/or risk. You will also showcase your expertise by guiding, advising, or supporting in all operational aspects, including document management and systems and procedures analysis. The work model for the role is: #LI-hybrid

This role is contributing to the Electrification Business Area division in Cary, NC. You will be mainly accountable for:

• Act as service owner and transition from one-time certification to a sustainable, operationalized compliance service with ongoing control ownership, evidence management, assurance reporting, and remediation processes for US and North America operations.

• Design and oversee multi-layered Governance frameworks across EL Security, Risk & Compliance teams and with all relevant stakeholders in business, division and country IS teams.

• Maintain a Security & Compliance dashboard aggregating risk metrics from global and local security services, govern risk assessments, and ensure periodic control attestations and compliance monitoring.

• Govern the EL security project design, development, and delivery aligned with risk-driven guidance, ensuring "security by design" across all EL Information Systems projects

• Oversee implementation of security controls across EL and EL assets in countries and divisions.

• Contribute to EL IS SRC Roadmap development, align security services with Corporate IS Security Roadmap, and provide periodic security posture reports to senior leadership

• Establish risk-focused metrics for security service delivery and project execution, maintain internal policies/standards aligned with ABB regulations

• Facilitate multi-country compliance with EL IS compliance team, external audits, and vendor engagement across EL.

• Drive continuous improvement of security services, implement security awareness campaigns, and address issues from audit findings.

Qualifications for the role

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Software Engineering or a related qualification, and/or demonstrated capability through past employment experience.

• 15+ years of Information Security experience with at least 10 years in leading governance, risk, projects, and communications

• Strong experience in security governance and risk from design, launch and maintenance.

• Strong experience in common information security management frameworks, such as International Standards Organization (ISO) 2700x, National Institute of Standards and Technology (NIST) 800-53, Cybersecurity Maturity Model Certification (CMMC).

• Experience defining and running compliance-as-a-service capabilities, including CMMC post-certification operations, assurance reporting, control evidence management, remediation governance, and stakeholder enablement across US business areas.

• Excellent leadership skills to manage and motivate distributed teams, experience in building strong relationships with internal and external stakeholders.

• Strong knowledge of the following areas of technical expertise: information security management and governance, IT risk assessment and management, IT Audit, the overall context of business processes and IS technologies.

• Related Project Management experience.

• Security Certification (CISSP, CISM, CRISC, etc.) and/or Auditor certifications (ISO 27001 auditor, CISA etc.) is mandatory.

• Excellent written and verbal communication skills, and ability to present complex and technical issues to diverse audiences including senior management.

• Candidate must already have work authorization to work in the US.

What's in it for you

We want you to bring your full self to work—your ideas, your energy, your ambition. You’ll have the tools and freedom to grow your skills, shape your path, and take on challenges that matter. Here, your work creates impact you can see and feel, every day.

ABB is an Equal Employment Opportunity and Affinnative Action employer for protected Veterans and Individuals with Disabilities at ABB.

All qualified applicants will receive consideration for employment without regard to their- sex (gender identity, gender expression, sexual orientation), marital status, citizenship, age, race and ethnicity, inclusive of traits historically associated with race or ethnicity, including but not limited to hair texture and protective hairstyles, color, religious creed, national origin, pregnancy, physical or mental disability, genetic information, protected Veteran status, or any other characteristic protected by federal and state law.

For more information regarding your (EEO) rights as an applicant, please visit the following websites: https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf

As an Equal Employment Opportunity and Affinnative Action Employer for Protected Veterans and Individuals with Disabilities, applicants may request to review the plan of a particular ABB facility between the hours of 9:00 A.M. - 5:00 P.M. EST Monday through Friday by contacting an ABB HR Representative at 1-888-694-7762.

Protected Veterans and Individuals with Disabilities may request a reasonable accommodation if you are unable or limited in your ability to use or access ABB's career site as a result of your disability. You may request reasonable accommodations by calling an ABB HR Representative at 1-888-694-7762 or by sending an email to [e-mail]. Resumes and applications will not be accepted in this manner. #LI-Onsite

ABB Benefit Summary for eligible US employees

[excludes ABB E-mobility, Athens union, Puerto Rico]

Go to MyBenefitsABB.com and click on "Candidate/Guest" to learn more

Health, Life & Disability

• Choice between two medical plan options: A PPO plan called the Copay Plan OR a High Deductible Health Plan (with a Health Savings Account) called the High Deductible Plan.

• Choice between two dental plan options: Core and Core Plus.

• Vision benefit.

• Company paid life insurance (2X base pay).

• Company paid AD&D (1X base pay).

• Voluntary life and AD&D – 100% employee paid up to maximums.

• Short Term Disability – up to 26 weeks – Company paid.

• Long Term Disability – 60% of pay – Company paid. Ability to "buy-up" to 66 2/3% of pay.

• Supplemental benefits – 100% employee paid (Accident insurance, hospital indemnity, critical illness, pet insurance.

• Paid Parental Leave.

• Employee Assistance Program.

• Health Advocate support resources for mental/behavioral health, general health navigation and virtual health, and infertility/adoption.

• Employee discount program.

Retirement

• 401k Savings Plan with Company Contributions.

• Employee Stock Acquisition Plan (ESAP).

Time off

ABB provides 11 paid holidays. Salaried exempt positions are provided vacation under a permissive time away policy.

För att bygga en renare och smartare framtid krävs alla sorters människor: de nyfikna, de modiga och de kreativa. Därför välkomnar vi människor med alla bakgrunder och erfarenheter.

Är du redo att göra skillnad?