Information Security Governance, Risk, and Compliance (GRC) Manager

CTS International • Lisle, IL

403d

About The Position

The Information Security Governance, Risk, and Compliance (GRC) Manager at CTS Corporation is responsible for developing and maintaining the company's information security framework and cybersecurity posture. This role involves assessing and prioritizing cybersecurity risks, ensuring compliance with regulatory requirements, and reporting on information security metrics. The position is based at the corporate headquarters in Lisle, IL, and requires occasional travel to other company sites.

Requirements

• Strong understanding of cybersecurity frameworks and standards (e.g., NIST CSF, ISO 27001, TiSAX).
• Experience in creating, managing, and maturing an Information Security Management System.
• Information Security Audit experience.

Nice To Haves

• Certifications like CGRC (Certified in Governance, Risk, and Compliance) can be beneficial.

Responsibilities

• Conducting thorough assessments to identify and evaluate potential cybersecurity risks.
• Creating and enforcing cybersecurity policies and standards to ensure compliance with industry regulations and best practices.
• Implementing strategies to mitigate identified risks and protect the organization's assets.
• Ensuring the organization adheres to relevant security standards and regulations such as NIST, ISO 27001, CMMC/DFARS and GDPR.
• Managing internal and external audits, participating in customer audits, tracking remediation efforts, and ensuring continuous compliance.
• Conducting due diligence and risk assessments for third-party vendors to ensure they meet the organization's security requirements.
• Overseeing and developing training programs to educate employees on cybersecurity best practices and compliance requirements.
• Working closely with internal teams, including legal, IT, and data privacy, to align cybersecurity efforts with organizational goals.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Electrical Equipment, Appliance, and Component Manufacturing
• Education Level: No Education Listed
• Number of Employees: 1,001-5,000 employees