Information Security- GRC
Core
Lead day-to-day execution of audit and certification programs (SOX, ISO 27001, SOC 2, NIS2, EU Cyber Resilience Act) and manage enterprise risk, third-party risk, and customer security assurance for Fluke products.
Role type
Senior Information Security GRC Analyst
Builds
Audit evidence, control frameworks, risk registers, and customer security assurance responses
Domain
Industrial technology / Information Security Compliance
Required skills
SOX ITGC/ITAC execution, ISO 27001 control operations, SOC 2 Type II audit leadership, NIS2 compliance, EU Cyber Resilience Act (CRA) support, Third-party risk management (TPRM), Enterprise risk management (ERM), Customer security questionnaire completion, Framework mapping (NIST 800-171, CMMC, PCI DSS, EU Data Act), GRC tool administration
Preferred skills
None stated
Technologies
ERP, data and analytics platforms, change-management tooling, GRC tools
Responsibilities
Lead SOX ITGC and ITAC execution including control testing and evidence submission; Act as primary audit liaison managing walkthroughs and evidence requests; Own ISO 27001 control operations and SOC 2 Type II audits; Complete customer security questionnaires and maintain an approved answer library; Maintain framework mappings to a unified control set; Own the TPRM process from intake to closure including vendor assessments; Maintain the information security risk register and drive corrective actions; Administer and improve GRC tools
Seniority
Mid-to-Senior, independent execution expected within 6 months