EnerSys · 1 day ago
Cybersecurity GRC Program Manager
Reading, PA
Full-time
Hybrid
Senior Level
5+ years expEnerSys is a global leader in stored energy solutions for industrial applications, headquartered in Reading, PA. The Cybersecurity Governance, Risk, and Compliance (GRC) Program Manager is responsible for guiding and executing cybersecurity assessments, collaborating with auditors, and ensuring compliance with cybersecurity frameworks while communicating effectively with internal stakeholders.
EnergyManufacturingRenewable EnergyTelecommunicationsTransportation
No H1B
U.S. Citizen Only
Responsibilities
Provide GRC guidance and interpretation of rules, regulations, risks, and best practices
Execute cybersecurity risk assessment and control attestation processes, including ongoing and annual assessments
Collaborate with Internal and External Auditors on security assessments and audits
Review control effectiveness evidence, collect, review, and upload evidence for compliance purposes
Document emerging and residual risk, assist in risk analysis and evaluation, and identify potential areas of risk
Engage with internal teams and consultants to ensure adherence to processes and troubleshoot, identify, analyze, and mitigate risks in existing processes, policies, and procedures
Lead the information security compliance program, ensuring compliance with regulations, and develop and implement effective policies and practices to secure sensitive data
Communicate operational metrics and trend analysis for IT Leadership, and collaborate with cross-functional teams to align GRC efforts with business objectives
Stay up to date on regulatory developments and industry trends
Expected to travel up to 10% each year
Perform other duties as assigned
Qualification
Required
This position is subject to U.S. export control laws and regulations, including ITAR. Employment is contingent upon the applicant's ability to qualify as a ‘U.S. person' under 22 C.F.R. 120.62. A ‘U.S. person' includes U.S. citizens, lawful permanent residents, refugees, and asylees
5+ years of experience in Information Technology and client/customer management
Strong understanding of cybersecurity principles, risk management frameworks, and compliance standards (e.g., CMMC, EU CRA, NIS2, TISAX, Essential Eight, IEC 62443, NIST CSF&RMF, ISO 27001)
Experience working with internal and external auditors
Excellent communication and interpersonal skills: Oral, written and listening
Strong analytical and problem-solving abilities
Ability to work independently and collaboratively in a cross-functional environment
Preferred
A degree in a technical field (Computer Science, Information Systems, or Cybersecurity) is preferred but not required
Relevant IT certification (e.g., CISSP, CISM, CISA, CRISC) other relevant certifications are preferred
Company
EnerSys
EnerSys is the global leader in stored energy solutions for industrial applications. We complement our extensive line of motive power,
5001-10000 employees
Funding
Current Stage
Public CompanyTotal Funding
$499MKey Investors
US Department of Energy
2025-01-17Grant· $199M
2024-01-04Post Ipo Debt· $300M
2004-07-30IPO
Leadership Team
Mark Matthews
President, Specialty Global
Recent News
2026-01-11
2025-11-09
Company data provided by crunchbase