Governance, Risk, Compliance Cybersecurity Lead

Purpose:

Are you ready to take your cybersecurity expertise to the next level? We're on the lookout for a dynamic professional to join our team as a Governance, Regulatory, Compliance (GRC) Cybersecurity Lead. If you're passionate about ensuring organizations stay ahead of the curve in cybersecurity compliance, this role is tailor-made for you. As a key player, you'll be at the forefront of safeguarding our company's integrity by navigating through the complex web of laws, regulations, and industry standards. Your impact will be profound as you shape our cybersecurity governance frameworks, mitigate risks, raise awareness and drive compliance processes. Reporting to the Sr Director of Information Security, you'll gain invaluable experiences while making a tangible difference in securing our digital future. Join us and be the guardian of cyber resilience.

Responsibilities:

Are you ready to take the helm in shaping our cybersecurity landscape? As the GRC Cyber Lead, you'll spearhead the development and refinement of our cybersecurity program, ensuring the protection of our IT, operational technology (OT) and connected product infrastructures. Your leadership will drive the design and execution of robust cybersecurity controls, policies, and procedures. But that's not all – you'll also be instrumental in nurturing a top-tier cybersecurity culture, dedicated to fortifying our defenses against evolving cyber threats.

Key responsibilities:

• Establish and maintain cybersecurity policies, standards, and procedures in accordance with industry best practices. Support NIST Cybersecurity Framework 2.0 compliance to ensure alignment with organizational goals and objectives.
• Collaborate with executive leadership to communicate and enforce cybersecurity governance principles throughout the organization.
• Support and maintain a cybersecurity training and awareness program, including innovative engagement ideas and gamification to increase awareness, and build a relationship with business partners.
• Stay abreast of current and emerging cybersecurity regulations and standards applicable to the organization.
• Conduct regular assessments to ensure compliance with relevant cybersecurity laws and industry regulations, including PCI DSS, SOX and SOC2 requirements, and others as needed.
• Coordinate with legal, compliance and internal audit teams to interpret and address regulatory requirements.
• Support internal teams to conduct regular internal audits to assess compliance with established security controls.
• Conduct risk assessments to identify and prioritize cybersecurity risks. Develop and implement risk mitigation strategies and action plans. Monitor and report on the effectiveness of risk management programs.
• Build a cybersecurity third party risk management program, including vendor management and access, supply chain risks and integrations.
• Host annual tabletop exercises for improved business resilience
• Work closely with the data privacy and identity teams to develop policy framework and controls for the organization.
• Support the legal team in the preparation and submission of reports to regulatory bodies as required in the event of a cybersecurity incident.

Education & Experience:

• 5-7 years of proven experience in cybersecurity governance, risk management, and compliance.
• In-depth knowledge of relevant cybersecurity laws, regulations, and industry standards.
• Excellent communication and interpersonal skills.
• Ability to collaborate with cross-functional teams and work effectively in a dynamic environment.
• Strong analytical and problem-solving skills.
• Bachelor's degree in Cybersecurity, Information Technology, Finance, Business, a related field, or relevant work experience.

Diversity & Inclusion:

At Delta Faucet Company, we view diversity as a mosaic of thoughts and perspectives that come from people’s varied cultural backgrounds, experiences, education, career paths and other influences that make each of us unique. For us, inclusion means welcoming differing opinions, collaborating, allowing people to come to work as who they are and recognizing everyone’s contributions. We know that in a diverse, inclusive company, ideas flow freely, all voices are heard and all perspectives are valued. Delta Faucet Company continuously strives to be this kind of organization. Diversity and Inclusion (D&I) supports our inherent values, makes us more relevant to customers and consumers and inspires innovation. It is not a goal or a program; it is a vital ingredient in our formula for success and a key to our future growth.

Company: Delta Faucet Company

Full time

Delta Faucet Company(the “Company”) is an equal opportunity employer and we want to have the best available persons in every job. The Company makes employment decisions only based on merit. It is the Company’s policy to prohibit discrimination in any employment opportunity (including but not limited to recruitment, employment, promotion, salary increases, benefits, termination and all other terms and conditions of employment) based on race, color, sex, sexual orientation, gender, gender identity, gender expression, genetic information, pregnancy, religious creed, national origin, ancestry, age, physical/mental disability, medical condition, marital/domestic partner status, military and veteran status, height, weight or any other such characteristic protected by federal, state or local law. The Company is committed to complying with all applicable laws providing equal employment opportunities. This commitment applies to all persons involved in the operations of the Company regardless of where the employee is located and prohibits unlawful discrimination by any employee of the Company.

Delta Faucet Company is an E-Verify employer. E-Verify is an Internet based system operated by the Department of Homeland Security (DHS) in partnership with the Social Security Administration (SSA) that allows participating employers to electronically verify the employment eligibility of their newly hired employees in the United States. Please click on the following links for more information.

E-Verify Participation Poster:English & Spanish

E-verify Right to Work Poster:English,Spanish

#LI-Remote