IT GRC & Compliance Lead (Hybrid, Tucson)

Hexagon Autonomous Solutions; Tucson (AZ); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Hexagon Autonomous Solutions in Tucson, AZ is seeking an IT GRC Specialist to join our team in a hybrid role. You will support governance, risk, and compliance by aligning IT systems and controls with regulatory requirements and internal policies.

You will lead risk assessments, support audits, and maintain security policies while collaborating with IT, Legal, and Procurement to improve our compliance posture.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, MIS, IT, or related field; equivalent combinations considered.
• 10+ years of experience in large, complex IT environments.
• Knowledge of information security standards and compliance requirements including ISO 27001, NIS2, NIST 800-171, CMMC, TISAX, and GDPR.
• Experience with IT and information security technologies and controls including cybersecurity, networks, infrastructure, applications, cloud services, and enterprise platforms.
• Proven experience in IT governance, risk management, and compliance.
• Strong communication and interpersonal skills with cross-functional stakeholders.

Responsibilities

• Support the implementation and maintenance of security controls aligned with industry-standard frameworks including ISO 27001, COBIT, SOX, and NIST.
• Conduct reviews of corporate policies and procedures and liaise for internal/external IT audits.
• Perform gap assessments against standards, regulatory requirements, and compliance frameworks; support remediation.
• Establish and maintain reporting on compliance health, risk status, and governance activities.
• Administer and enhance GRC platforms and related IT governance processes.
• Serve as the primary contact for IT compliance, governance, and audit activities.
• Develop and maintain IT policies, standards, procedures, and process documentation.
• Lead IT risk assessment activities and support risk management initiatives.
• Perform risk assessments, control testing, and compliance evaluations.
• Support third-party risk management through assessments and vendor reviews.
• Develop and maintain security awareness training programs.
• Collect, evaluate, and organize evidence for audits, investigations, and inquiries.
• Assist with completion of customer security/compliance questionnaires.

Skills

IT governance

Risk management

Regulatory compliance

Information security

Cross-functional collaboration

Security controls

Audits

Education

Bachelor's degree in CS/IT or related field

Tools

GRC platforms

Audit management tools

Job description

Hexagon Autonomous Solutions in Tucson, AZ is seeking an IT GRC Specialist to join our team in a hybrid role. You will support governance, risk, and compliance by aligning IT systems and controls with regulatory requirements and internal policies.

You will lead risk assessments, support audits, and maintain security policies while collaborating with IT, Legal, and Procurement to improve our compliance posture.