Remote InfoSec GRC Leader — Risk & Compliance

Signet Jewelers Limited; Akron (OH); Hybride; USD 125 000 - 150 000; Plein temps

Avantages offerts par ce poste

Comprehensive health insurance

Generous 401(k) matching

Paid time off + holidays

Employee discounts on merchandise

Learning & development programs

Résumé du poste

Signet Jewelers Limited seeks an Information Security GRC Manager to lead governance, risk, and compliance for information security. You will align policies and controls with regulatory needs and business goals, coordinating audits and risk mitigation across the enterprise.

You will partner with IT, Legal, Privacy, and business teams to embed security into operations, reporting risk posture and program maturity to senior leadership.

Qualifications

• Bachelor’s degree in a related field.
• 10+ years in information security, IT risk, or compliance, with 2–3+ years in a GRC role.
• Familiarity with industry frameworks (NIST, ISO 27001, COBIT).
• Experience coordinating assessments with regulators and external auditors.

Responsabilités

• Plan and execute compliance readiness and certification assessments (SOX, PCI-DSS, NIST CSF, ISO 27001).
• Serve as primary contact for external assessors and auditors.
• Coordinate internal and external audits, including SOX-related controls.
• Drive risk-based decision-making across security and business stakeholders.
• Develop and deliver security awareness programs related to risk and compliance.

Connaissances

Audit management

Audit coordination

Risk assessment

Regulatory compliance

Cross-functional collaboration

Leadership & team mgmt

Written & verbal comms

Formation

Bachelor’s degree in Information Security / Cybersecurity / CS / Business

Outils

Optro (AuditBoard)

ServiceNow GRC

OneTrust

Description du poste

Signet Jewelers Limited seeks an Information Security GRC Manager to lead governance, risk, and compliance for information security. You will align policies and controls with regulatory needs and business goals, coordinating audits and risk mitigation across the enterprise.

You will partner with IT, Legal, Privacy, and business teams to embed security into operations, reporting risk posture and program maturity to senior leadership.