Information Security- GRC
RemoteFull-time5–9 yrsPosted 3 days ago
Senior cybersecurity role at Fortive. Needs 5+ years. Remote.
About the role
Fluke's Information Security GRC team is seeking an experienced compliance professional to lead day-to-day execution of our audit and certification programs which include: SOX ITGC / ITAC, ISO 27001, SOC 2 Type II, NIS2, EU Cyber Resilience Act, and Cyber Essentials Plus. Also to help extend our coverage into emerging regulatory and AI governance requirements.
What you'll do
- Audit leadership & SOX
- Act as primary audit liaison: lead walkthroughs, manage PBC / evidence requests, translate auditor follow-ups into defined requirements for control owners
- Coordinate evidence across key systems, including ERP, data and analytics platforms, and change-management tooling. Covering privileged access, change management
- Maintain segregation of duties within the team's test / review / sign-off model, performing control testing and secondary review as required
- Track and report control status, remediation items and prior-year improvement opportunities to GRC leadership and Finance stakeholders
What you need
- ISO 27001
- Risk management
- Compliance
- IAM
- SOX
- Internal audit
Good to have
- CISA
- CISSP
- CISM
- ERP
- SOP writing