Security and Compliance Manager

Morrison Products Inc; Cleveland (OH); On-site; USD 90,000 - 150,000; Full time

Job summary

Morrison Products Inc. in Cleveland, OH is seeking an experienced Security and Compliance Manager to ensure that our data privacy policies, operations, and systems comply with state and federal laws and industry best cybersecurity practices. Reports to the Director of IT.

You will lead risk assessments, audits, and the updating of security policies, collaborating with IT to maintain secure architecture and educate staff on policy updates, with occasional travel.

Qualifications

• Bachelor’s degree in Business Administration, IT, Human Resources, or any related field.
• 5 years of experience in a Compliance, Risk Management, or Cybersecurity role.
• 2 years of supervisory experience preferred.
• CISSP certification a plus; strong knowledge of security and privacy standards.

Responsibilities

• Review and update information security and privacy policies.
• Develop and oversee new security and compliance policies and procedures.
• Carry out risk assessments and audits; perform security‑log reviews.
• Maintain security architecture and collaborate with IT on security measures.
• Advise leadership on best strategies for securing data systems and processes.
• Keep up to date with external regulations and data privacy practices.
• Conduct regular training sessions on security policy updates.
• Collaborate with vendors on data handling and licensing compliance.
• Report security breaches to management and coordinate resolution.
• Support disaster recovery planning and incident response readiness.

Skills

Security

Compliance

Risk management

Cybersecurity

IT auditing

Data privacy

Education

Bachelor’s degree in related field

Job description

Position:Security and Compliance Manager

Location: Cleveland, OH

Job Id:403

# of Openings:1

Summary

We are looking for an experienced Security and Compliance Manager who will ensure that our data privacy policies, operations, and systems comply with all relevant state and federal laws and best cybersecurity practices. Reports to the Director of IT.

Primary Responsibilities

Some of your main responsibilities will include improving our organization’s security and compliance procedures, conducting risk assessments and audits to establish the effectiveness of our current security systems, and minimizing the impact of potential security breaches and incidents. Working closely with the IT department, you will be responsible for developing and maintaining our security architecture and performing timely security audits. Our ideal candidate should have an in‑depth understanding of data privacy laws and other relevant state and federal regulations, as well as cybersecurity best practices.

• Review and update our current information security and privacy policies.
• Create and oversee the implementation of new security and compliance policies and procedures.
• Carry out regularly scheduled security functions, such as network scans, vulnerability scans, and security‑log reviews. (Pen Testing, etc.)
• Conduct assessments and audits to measure the efficiency of our compliance and security systems.
• Evaluate and document disaster recovery programs to ensure better response in cases of security incidents and breaches.
• Advise the Director of IT and other executives on the best strategies for optimizing the security of data systems, information assets, and general business processes.
• Keep up to date with external security and compliance regulations and data privacy and security best practices to lead the improvement of internal security and compliance policies and procedures as required.
• Conduct regular training sessions and workshops to educate employees about the latest information security and compliance policy updates.
• Collaborate with vendors to ensure proper data handling security measures and adherence to all licensing requirements.
• Report security breaches to management for prompt resolution.

Supervisory Responsibility

None currently.

Travel

Some travel may be required for meetings/company sites for training and auditing.

Education Required

Bachelor’s degree in Business Administration, IT, Human Resources, or any related field.

Experience Required

5 years of experience in a Compliance, Risk Management, or Cybersecurity role. Preferably 2 years of experience as a Compliance Manager or another related supervisory role. Strong understanding of information security and privacy standards and best practices related to data confidentiality. In‑depth knowledge of industry‑relevant data security and compliance regulations. Excellent analytical, data visualization, and communication skills. Experience in IT auditing practices. A CISSP certification will be considered a plus (Certified Information Systems Security Professional)