Remote GRC Director — ISO 27001, SOX & Enterprise Risk

States Manufacturing Corporation; Champlin (MN); Remote; USD 140,000 - 200,000; Full time

Job summary

States Manufacturing Corporation is seeking a hands-on Director, Governance, Risk & Compliance (GRC) to build and mature our enterprise GRC program. Reporting to the CISO, you will lead cross-functional teams across IT and OT, drive risk management, audits, and certification activities including ISO 27001 and SOX ITGC.

You will define policies, manage vendor risk, and implement CCM and KPIs to provide Board-ready visibility across our global footprint while balancing manufacturing uptime and

Qualifications

• 7+ years IT audit or enterprise risk experience.
• 5+ years leading GRC programs in public companies.
• End-to-end ISO 27001 implementation experience.
• SOX 404 ITGC ownership across ERP (SAP/Oracle).
• OT/ICS risk exposure in manufacturing.
• Hands-on with GRC platforms, IAM, CMDB, SIEM/SOAR.
• Strong stakeholder management and executive communication.

Responsibilities

• Lead enterprise GRC program aligned to ISO 27001, SOX, SOC 2, NIST CSF, CIS Controls.
• Own ISMS lifecycle: scope, risk assessment, SoA, controls, audits, management review, certification readiness.
• Define and maintain policies, standards and procedures (access control, change, vulnerability, secure SDLC, incident response).
• Chair governance forums and coordinate ERM activities.
• Integrate vendor risk management and audits; manage audits.
• Coordinate OT risk integration into enterprise risk register with pragmatic controls.
• Audit planning and coordination with internal and external auditors; control evidence repositories.
• Develop and maintain control libraries, test plans, and mapping across frameworks.
• Lead hybrid, geographically distributed team; build SOWs, budgets, vendor SLAs/KPIs.
• Foster accountability, transparency, and continuous improvement.

Skills

GRC leadership

IT audit

Risk management

Stakeholder management

OT risk

Executive communication

Education

Bachelor's degree (IS/CS/Engineering/Accounting)

Tools

Archer

Drata

Vanta

ServiceNow GRC/IRM

OneTrust

Job description

States Manufacturing Corporation is seeking a hands-on Director, Governance, Risk & Compliance (GRC) to build and mature our enterprise GRC program. Reporting to the CISO, you will lead cross-functional teams across IT and OT, drive risk management, audits, and certification activities including ISO 27001 and SOX ITGC.

You will define policies, manage vendor risk, and implement CCM and KPIs to provide Board-ready visibility across our global footprint while balancing manufacturing uptime and