Remote Senior Cyber Risk & Compliance Leader

CONMED; Largo (FL); A distancia; USD 104.000 - 164.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive compensation

Excellent healthcare including medical

401K with company match

Employee Stock Purchase Plan

Tuition assistance

Referral program incentives

Descripción de la vacante

CONMED is seeking a Lead Information Security Auditor (GRC) to drive governance, risk, and compliance across healthcare, manufacturing, and IT environments. This remote role partners with Audit, Legal, and Regulatory affairs to ensure security requirements are embedded throughout product lifecycles and operations.

You will translate technical risks into executive-ready business impact statements, oversee third-party risk, and guide audit readiness, remediation, and metrics reporting to senior

Formación

• Bachelor's degree in cybersecurity or related field; 7+ years in governance, risk, and compliance.
• CISA certification preferred; experience with healthcare/manufacturing regulated industries.
• Experience leading internal/external audits and regulatory examinations; familiarity with NIST, GDPR, SOX.

Responsabilidades

• Lead cybersecurity governance, risk, and compliance initiatives across IT, OT, and product development.
• Manage enterprise cyber risk program and cyber risk register with remediation tracking.
• Coordinate regulatory compliance & audits, evidence collection, and remediation validation.

Conocimientos

Cybersecurity governance

Risk management

Compliance

Audit coordination

Executive reporting

Educación

Bachelor’s degree in Cybersecurity, IT, Business, Engineering, Risk Management

CISA certification

CISSP

CRISC

CISMCGRC (CAP)

ISO 27001 Lead Implementer/Auditor

Herramientas

ServiceNow GRC

Archer

OneTrust

AuditBoard

Descripción del empleo

CONMED is seeking a Lead Information Security Auditor (GRC) to drive governance, risk, and compliance across healthcare, manufacturing, and IT environments. This remote role partners with Audit, Legal, and Regulatory affairs to ensure security requirements are embedded throughout product lifecycles and operations.

You will translate technical risks into executive-ready business impact statements, oversee third-party risk, and guide audit readiness, remediation, and metrics reporting to senior