IT GRC Specialist

• Support the implementation and maintenance of security controls aligned with industry-standard frameworks including ISO 27001 COBIT SOX and NIST.
• Conduct regular reviews of corporate policies and procedures while serving as a key liaison for internal and external IT audits.
• Perform gap assessments against business-adopted standards regulatory requirements and compliance frameworks while supporting remediation planning and execution.
• Establish and maintain reporting on compliance health risk status and governance activities for assigned projects and initiatives.
• Administer and enhance GRC platforms and associated IT governance processes.
• Serve as the primary point of contact for IT compliance governance and audit-related activities.
• Develop and maintain IT policies standards procedures and process documentation.
• Lead IT risk assessment activities and support broader information security risk management initiatives.
• Perform risk assessments control effectiveness testing and compliance evaluations.
• Support third-party risk management activities through risk assessments and vendor review processes.
• Develop and maintain security awareness training programs for new employees and annual compliance training initiatives.
• Collect evaluate and organize evidence supporting audits investigations customer requests and compliance inquiries.
• Assist with the completion of customer security and compliance questionnaires.

• Bachelors degree in Computer Science Computer Engineering Management Information Systems Information Technology or a related field. Equivalent combinations of education certifications and experience will be considered.
• 10 years of experience working within large complex IT environments.
• Knowledge of information security standards and compliance requirements including ISO 27001 NIS2 NIST 800-171 CMMC TISAX and GDPR.
• Experience with IT and information security technologies and controls including cybersecurity networks infrastructure applications cloud services and enterprise platforms.
• Proven experience in IT governance risk management and compliance.
• Strong communication and interpersonal skills with the ability to work effectively with cross-functional stakeholders.

Nice To Have:

• Professional certifications such as CISSP CISA CRISC CGEIT ISO 27001 Lead Implementer or similar.
• Experience supporting global manufacturing industrial technology or multinational organizations.
• Experience with GRC platforms audit management tools and compliance automation solutions.

Key Success Factors:

• Strong understanding of governance risk compliance and information security principles.
• Ability to build trusted relationships across IT Information Security Legal Finance Procurement and business teams.
• Strong analytical skills with the ability to identify risks and develop practical remediation strategies.
• Excellent organizational skills with the ability to manage multiple audits assessments and compliance initiatives simultaneously.
• Commitment to continuous improvement and operational excellence.
• Ability to communicate complex compliance and risk concepts clearly to both technical and non-technical audiences.

Not sure if you meetall the qualifications for this role Let us decide! At Hexagon we are committed to a diverse and inclusive work youre excited about the opportunities this role could bring we encourage you to apply. If you have any questions about the role or our company please email our team at and we will be pleased to follow up with you. Please do not send cover letters or resumes to this address.