Senior GRC Information Security Engineer

Compliance Officer Jobs; Fountain Inn (SC); On-site; USD 110,000 - 170,000; Full time

Job summary

Kyocera-AVX in Greenville, Fountain Inn, South Carolina, is seeking an Information Security Engineer focused on GRC. This full-time role requires expertise in governance, risk management, and compliance to support an enterprise security program.

You will drive policy, risk assessments, vendor risk, and audit readiness, collaborating with IT and security teams to sustain control health and regulatory compliance. Strong communication is essential for executive reporting and stakeholder updates.

Qualifications

• Bachelor's degree required; 10+ years in information security, GRC, or compliance roles.
• Experience with NIST CSF/800-53/171, CIS and ISO 27001.
• Hands-on risk, control assessments, and audit response experience.

Responsibilities

• Design, implement, audit, and maintain GRC controls aligned to NIST, CIS, ISO 27001.
• Drive policy development, risk assessments, third-party risk, and audit readiness.
• Test controls, document gaps, and track remediation to closure.
• Collaborate with vendors to review SOC/ISO artifacts and evidence.
• Assist with control implementation in IT/SecOps (access, logging, encryption, backup).
• Produce dashboards and executive risk/status reports for stakeholders.

Skills

GRC governance

Risk assessment

Regulatory compliance

Executive reporting

Vendor risk management

Education

Bachelor's degree

Master's degree or advanced certification

Tools

Archer

ServiceNow GRC

OneTrust

RSA

Job description

Kyocera-AVX in Greenville, Fountain Inn, South Carolina, is seeking an Information Security Engineer focused on GRC. This full-time role requires expertise in governance, risk management, and compliance to support an enterprise security program.

You will drive policy, risk assessments, vendor risk, and audit readiness, collaborating with IT and security teams to sustain control health and regulatory compliance. Strong communication is essential for executive reporting and stakeholder updates.