Cybersecurity Compliance Program Manager

Littelfuse•Chicago, IL

1d•$104,400 - $161,760

About The Position

The Cybersecurity Compliance Program Manager is a hands-on, player-coach leader responsible for Littelfuse’s cybersecurity compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements. Reporting directly to the Chief Information Security Officer (CISO), this person translates requirements into practical controls and creates or improves the processes, policies, procedures, standards, templates, and evidence needed to maintain continuous audit readiness. The role combines program leadership with direct execution across cybersecurity, infrastructure, applications, governance, and risk. The manager sets direction while developing deliverables, resolving gaps, and driving implementation, certification, remediation, and continuous improvement. They lead assessments and cross-functional execution, operationalize technical controls, manage supplier and subcontractor obligations, and report readiness and risk to executives. Littelfuse is a diversified industrial technology manufacturing company headquartered in Chicago, Illinois, serving industrial, transportation, and electronics markets worldwide. It has approximately 16,000 employees. The posted salary range is $104,400–$161,760, with the offer varying by location, skills, knowledge, and experience. The company states that it offers competitive compensation and benefits, performance-based incentives, flexible work arrangements, and development opportunities.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements associated with government, defense, regulated, or export-controlled information.
Broad hands-on experience across infrastructure, networks, Linux and Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.
Hands-on experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.
Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.

Nice To Haves

Experience in a global manufacturing company, including plants, operational technology, engineering, product development, and complex supply chains.
Experience harmonizing multiple frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.
Relevant certification such as CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP.

Responsibilities

Own, build, and execute the compliance portfolio by developing roadmaps, governance, workplans, milestones, accountability, and readiness routines.
Create and maintain compliance processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
Lead audits and reviews; assess controls and evidence, document gaps, develop corrective actions, and validate sustainable closure.
Translate requirements into implementable technical controls and work across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
Develop or improve system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.
Coordinate global technology, manufacturing, legal, contracts, audit, procurement, and business teams; create missing deliverables and remove barriers.
Track supplier and subcontractor compliance and advise management on CMMC and contractual flow-down requirements.
Provide executives with readiness and risk metrics, monitor regulatory changes, maintain incident response plans, and reinforce compliance ownership through guidance and awareness.