Apply on Employer Site

SC Johnson · 6 hours ago

Associate Manager, Information Security Risk and Compliance

Racine, WI

Full-time

Onsite

Mid, Senior Level

5+ years exp

SC Johnson is a fifth-generation family company that has been leading with purpose for over 130 years. The Associate Manager, Information Security Risk and Compliance is responsible for supporting the business's security direction and elevating the company's security posture while overseeing information security assurance processes and controls.

Consumer Goods

No H1B

Responsibilities

Develop and provide oversight of information security assurance processes/controls to achieve Security Governance Committee (SGC) desired goals

Provide updates on roadmap and project execution and creating artifacts to enable monitoring and reporting, including risk assessments to SGC

Escalates Oversight Areas to GIS Governance for direction

Designs and executes controls to effectively remediate risk per the risk tolerances and in compliance with SC Johnson policies and standards

Lead the security risk exception process by working with internal customers (business and IT), reviewing security gaps and identifying remediation requirements

Effectively communicate and educate business on security gaps and risks as identified

Conduct security risk assessments as assigned

Qualification

RiskComplianceCybersecuritySecurity FrameworksControl FrameworksInformation SecurityAutomation KnowledgePrivacy LawsAudit ExperienceSelf-assessment TestingMilitary ExperienceCRISC CertificationProblem-solvingCommunicationProject ManagementTeam Leadership

Required

Bachelor's degree in Computer Science or Management Information Systems (MIS), or equivalent degree. Military experience considered in lieu of education requirement

5+ years' experience in a Risk and Compliance or Enterprise Security role, or Management/ Administration of enterprise information technology systems

2+ Experience in cybersecurity as a practitioner or with exposure to various security frameworks (NIST, ISO, COBIT)

Qualified candidates must be legally authorized to work in the United States without the need for current or future sponsorship for full-time employment