Senior InfoSec GRC Leader — Governance, Risk & Compliance

ABB; Cary (NC); On-site; USD 170,000 - 210,000; Full time

Benefits offered by this job

Health & life insurance

401k with company contributions

Employee stock purchase plan

Paid holidays

Job summary

ABB i Cary, NC söker en erfaren ledare inom informationssäkerhet och riskhantering som kan etablera och driva governance, compliance och operativa processer över regionen.

Du blir serviceägare för säkerhets- och efterlevnadsprogram, leder tvärfunktionella team och rapporterar till senior ledning. Våra fokusområden inkluderar ISO 27001, NIST 800-53 och CMMC samt “security by design” i projekt.

Qualifications

• Bachelors or Master’s degree in Information Technology, Computer Science, Software Engineering, or related qualification.
• 15+ years of Information Security experience with at least 10 years in governance, risk, projects and communications.
• Experience in security governance and risk from design to maintenance.
• Strong knowledge of ISO 2700x, NIST 800-53, CMMC.
• Experience defining and running compliance-as-a-service capabilities (CMMC post-certification).
• Excellent leadership skills for distributed teams; stakeholder management.
• Knowledge of IT risk assessment, IT Audit, and IS technologies.
• Project Management experience.
• Security Certifications (CISSP, CISM, CRISC) and/or ISO 27001 auditor / CISA.
• Excellent written and verbal communication; ability to present to senior management.
• US work authorization is required.

Responsibilities

• Act as service owner and transition to sustainable compliance service with ongoing control ownership.
• Design and oversee governance frameworks across EL Security, Risk & Compliance teams.
• Maintain a Security & Compliance dashboard with risk metrics and attestations.
• Govern security project design and delivery aligned with risk guidance and security by design.
• Oversee implementation of security controls across EL assets and countries.
• Contribute to IS SRC Roadmap and provide security posture reports to leadership.
• Establish risk-focused metrics and maintain policies aligned with ABB regulations.
• Coordinate multi-country compliance with IS compliance teams and audits.
• Drive continuous security service improvement and address audit findings.

Job description

ABB i Cary, NC söker en erfaren ledare inom informationssäkerhet och riskhantering som kan etablera och driva governance, compliance och operativa processer över regionen.

Du blir serviceägare för säkerhets- och efterlevnadsprogram, leder tvärfunktionella team och rapporterar till senior ledning. Våra fokusområden inkluderar ISO 27001, NIST 800-53 och CMMC samt “security by design” i projekt.