Senior GRC Security Engineer

KYOCERA AVX Greenville; Fountain Inn (SC); On-site; USD 140,000 - 190,000; Full time

Job summary

KYOCERA AVX Greenville is seeking an experienced GRC leader to design, implement, and govern the organization’s information security program in alignment with NIST, CIS, and ISO 27000 frameworks. You will drive risk assessments, third-party risk, audit readiness, and continuous compliance using a structured project management approach.

The role requires 10+ years in information security with strong communication skills and hands-on experience with GRC tooling such as Archer, ServiceNow GRC,

Qualifications

• Bachelor's degree required with 10+ years in information security focusing on GRC or risk/compliance.
• Experience with NIST CSF, NIST SP 800-53/171, CIS, ISO 27001 and related frameworks.
• Hands-on risk assessments, control assessments, and audit responses experience.
• Knowledge of regulatory requirements such as GDPR, CMMC, GDPR, IATF or related.
• Strong written and verbal communication; ability to produce executive-level reporting.
• Proficiency with GRC tooling (Archer, ServiceNow GRC, OneTrust, RSA) and security monitoring platforms.

Responsibilities

• Governance, policy & control design: Maintain policies/standards; map obligations to frameworks; define testable controls and evidence.
• Risk management & exceptions: Conduct risk assessments; maintain risk register; support remediation decisions.
• Compliance & audit readiness: Test controls, document gaps, gather audit evidence, close findings.
• Third-party risk: Assess vendor security; review artifacts; drive remediation with vendors.
• Control implementation support & monitoring: Collaborate with IT/SecOps to implement and monitor controls; define evidence sources.
• Metrics & stakeholder communication: Create dashboards and reports for risk, control health, and remediation aging.
• Operational support & enablement: Provide GRC guidance during incidents and publish job aids to decrease exceptions.

Skills

GRC

NIST frameworks

Risk assessments

Audit readiness

Third-party risk

Policy design

Executive reporting

Stakeholder comms

Education

Bachelor's degree

Master’s degree or advanced certification

Certifications: CISSP, CISM, CRISC, CGEIT

Tools

Archer

ServiceNow GRC

OneTrust

RSA

Security monitoring platforms

Job description

KYOCERA AVX Greenville is seeking an experienced GRC leader to design, implement, and govern the organization’s information security program in alignment with NIST, CIS, and ISO 27000 frameworks. You will drive risk assessments, third-party risk, audit readiness, and continuous compliance using a structured project management approach.

The role requires 10+ years in information security with strong communication skills and hands-on experience with GRC tooling such as Archer, ServiceNow GRC,