Senior GRC & Information Security Leader

CONMED Corporation; Largo (FL); On-site; USD 104,000 - 164,000; Full time

Benefits offered by this job

Competitive compensation

Excellent healthcare (medical, dental,

Vision and prescription coverage

Disability & life insurance

401K with company match

Employee Stock Purchase Plan

Tuition assistance

Job summary

CONMED is seeking a senior Information Security Auditor (GRC) to lead governance, risk, and compliance initiatives across product development, manufacturing, OT, and enterprise IT. You will align cybersecurity with business objectives, manage third-party risk, and drive regulatory readiness in a regulated healthcare environment.

The role requires 7+ years in cybersecurity governance, risk, and compliance, with strong knowledge of NIST, ISO 27001, SOX, GDPR, and NIS2.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity, IT, business, engineering, or risk management.
• 7+ years of experience in cybersecurity governance, risk management, compliance, audit, or related disciplines.
• Experience in healthcare, medical device manufacturing, life sciences, or regulated industries preferred.
• Strong knowledge of NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and third-party risk management.
• Experience developing executive risk reporting, metrics, and board-level presentations.
• Experience managing enterprise GRC platforms such as ServiceNow GRC, Archer, OneTrust, or AuditBoard.

Responsibilities

• Lead cybersecurity governance, risk, and compliance initiatives.
• Translate technical risks into business impact statements for executives.
• Oversee audits and regulatory examinations and remediation tracking.
• Develop risk treatment plans and monitor mitigation activities to closure.
• Partner with Audit, Legal, Compliance, and Regulatory Affairs to ensure compliance readiness.
• Lead third-party risk management, vendor due diligence, and contractual security obligations.
• Oversee product security governance and secure development practices.
• Present risk and compliance updates to executives and governance forums.
• Drive awareness and culture of security accountability across the organization.

Skills

Governance

Risk management

Regulatory compliance

Audit management

Vendor risk

Product security

Executive reporting

GRC tools

Cybersecurity frameworks

Healthcare / regulated industry

Education

Bachelor's degree in Cybersecurity, IT, Business, Engineering, Risk Management, or related field

Tools

ServiceNow GRC

Archer

OneTrust

AuditBoard

Job description

CONMED is seeking a senior Information Security Auditor (GRC) to lead governance, risk, and compliance initiatives across product development, manufacturing, OT, and enterprise IT. You will align cybersecurity with business objectives, manage third-party risk, and drive regulatory readiness in a regulated healthcare environment.

The role requires 7+ years in cybersecurity governance, risk, and compliance, with strong knowledge of NIST, ISO 27001, SOX, GDPR, and NIS2.