Senior Cyber Security Analyst - Hybrid & Compliance Lead

Stanley Black & Decker, Inc.; New Britain (CT); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

401(k)

Employee Stock Purchase Plan

Paid time off

Tuition reimbursement

Tool discounts

Job summary

Stanley Black & Decker, Inc. in New Britain, CT is seeking a Sr Analyst in Cyber Security for a hybrid role.

You will lead cybersecurity compliance initiatives, align with ISO 27001, NIST, PCI DSS, and SOX, and collaborate with IT, security, and business teams to close audit findings. The ideal candidate has 3+ years in cyber security or IT GRC, plus relevant certifications and strong knowledge of IT security frameworks.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 3+ years of experience in cyber security, IT audit, or IT GRC roles.
• Professional certifications such as CISA, CISSP, CISM, or CRISC highly desirable.
• Strong knowledge of IT security frameworks (e.g., NIST, ISO) and regulatory requirements.
• Experience conducting IT security audits.

Responsibilities

• Lead and support cybersecurity compliance initiatives, ensuring alignment with frameworks (ISO 27001, NIST, PCI DSS, SOX, NIS 2).
• Monitor and assess effectiveness of cybersecurity and compliance controls, recommending enhancements and remediation strategies.
• Collaborate with IT, security, and business teams to resolve audit findings and compliance issues; escalate high-risk or unresolved issues as needed.
• Maintain up-to-date knowledge of regulatory requirements, standards, and best practices.
• Prepare and deliver compliance and audit reports to management and regulatory authorities, track and report on compliance metrics and remediation progress.
• Support and prepare for third-party and external audits, acting as liaison with auditors and regulators.
• Develop and deliver training and awareness programs on cybersecurity compliance; provide guidance to staff on compliance and audit requirements.
• Develop, maintain, and update IT GRC documentation (policies, procedures, risk registers, control matrices, compliance checklists).
• Identify, evaluate, and report on control gaps; maintain a log of compliance and audit issues and their resolution status.
• Collaborate across departments to ensure company-wide compliance and effective resolution of issues.
• Proactively identify emerging risks and propose innovative solutions to strengthen cybersecurity posture.

Skills

Cyber security

IT audit

GRC

NIST/ISO familiarity

Regulatory compliance

Education

Bachelor’s degree in Information Security

Tools

GRC software

Job description

Stanley Black & Decker, Inc. in New Britain, CT is seeking a Sr Analyst in Cyber Security for a hybrid role.

You will lead cybersecurity compliance initiatives, align with ISO 27001, NIST, PCI DSS, and SOX, and collaborate with IT, security, and business teams to close audit findings. The ideal candidate has 3+ years in cyber security or IT GRC, plus relevant certifications and strong knowledge of IT security frameworks.