Cybersecurity Governance and Compliance Specialist

Ilitch • Detroit, MI

73d

About The Position

Imagine working for a company that measures its success based off the growth of its colleagues, a company that invests in its future by investing in you. Little Caesars is a company where our colleagues make an impact.

We are seeking a highly driven and autonomous Governance and Compliance Specialist to lead and mature our cybersecurity compliance and risk management initiatives. This role demands a proactive professional with deep expertise in regulatory frameworks, risk assessment, and compensating controls-someone who can operate independently, influence cross-functional teams, and elevate our governance posture without constant oversight.

Requirements

• Proven ability to work independently and take ownership of compliance and governance functions.
• Strong understanding of cybersecurity risk management, control frameworks, and compensating control strategies.
• Minimum 2 years of hands-on experience in cybersecurity compliance, including PCI DSS and ITGC.
• Proficiency with GRC platforms (e.g., ServiceNow), audit documentation, and evidence management.
• Familiarity with cloud security (e.g., Azure) and enterprise IT environments.
• Excellent communication skills with the ability to influence and educate across technical and non-technical teams.

Nice To Haves

• Certifications such as CISA, CISM, CISSP, CRISC, or PCI ISA.
• Experience with frameworks like NIST CSF, ISO 27001, SOC 2, and GDPR.
• Demonstrated success in leading audit engagements and driving remediation efforts.

Responsibilities

• Lead Compliance Initiatives: Own and drive compliance programs including PCI DSS, ITGC, and other regulatory frameworks. Ensure controls are implemented, monitored, and continuously improved.
• Risk Assessment & Control Design: Conduct thorough cyber risk assessments, identify control gaps, and recommend effective compensating controls that align with business objectives and risk appetite.
• Audit Readiness & Execution: Prepare for and lead internal and external audits. Ensure evidence collection, documentation, and remediation tracking are complete and audit-ready.
• Policy & Standards Development: Author and maintain cybersecurity policies, standards, and procedures that reflect current regulatory expectations and industry best practices.
• Metrics & Reporting: Develop and maintain dashboards and metrics within GRC platforms to track compliance posture, control effectiveness, and risk trends.
• Cross-Functional Collaboration: Partner with infrastructure, cloud, QA, and security teams to embed compliance into system design, change management, and operational workflows.
• Security Awareness & Training: Deliver targeted training and guidance to business and technical stakeholders on compliance obligations and secure practices.
• Vulnerability & Control Monitoring: Oversee vulnerability remediation and ITGC control performance, including access reviews, logging, and backup validation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Performing Arts, Spectator Sports, and Related Industries
• Education Level: No Education Listed