Cybersecurity Compliance Officer

Job Description

Job Description:

Insight Global is seeking a Senior Cybersecurity Compliance Officer for a top global science and advanced materials/manufacturing client. This individual will play a critical role in strengthening cybersecurity compliance across complex global IT and OT environments, with significant ownership of the organization’s CMMC Level 2 certification program. They will partner across cybersecurity governance, risk, manufacturing, and technology teams to translate evolving global regulations into actionable controls, support audits and assessments, drive remediation, and continuously improve the enterprise GRC program.

Day-to-Day:

Own and enhance the cybersecurity compliance control framework across global IT and OT environments Lead the CMMC L2 certification program and manage the associated service provider Partner with governance and risk teams to continuously improve the GRC program Monitor compliance metrics, identify risk/gaps, and recommend remediation Support compliance assessments and audits and evaluate corrective action plans Advise IT and OT teams on ISO 27k, CMMC, NIS2, TISAX, Dual Use, SOX, and other regulatory obligations Translate regulations into practical controls for technology teams Monitor regulatory changes and drive organizational adoption Facilitate the IT Compliance Committee and participate as the compliance SME in cybersecurity/GRC meetings Maintain UK Cyber Essentials Plus certification Support customer cybersecurity questionnaires and onsite customer audits Develop compliance training and awareness for IT stakeholders

Skills and Requirements

7+ years of progressive cybersecurity, IT compliance, or regulatory compliance experience 3+ years of experience within a global manufacturing environment Strong CMMC Level 2 knowledge/experience, including managing certification/compliance programs Expertise across global cybersecurity/regulatory frameworks such as ISO 27000, NIS2, TISAX, EAR/Dual Use, and SOX ITAR Experience Strong GRC experience, including controls, assessments, audits, remediation, and compliance monitoring Bachelor’s/Master’s in Information Security, Computer Science, Engineering, Law, related discipline, or equivalent experience CISSP, CISA, CISM, CSA, or similar certification UK Cyber Essentials Plus experience Experience with customer cybersecurity questionnaires and customer audits Third-party risk management (TPRM) experience Experience developing cybersecurity/compliance training Experience facilitating compliance or GRC committees in a multinational organization

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].