Information Security- GRC

About the role

Fluke's Information Security GRC team is seeking an experienced compliance professional to lead day-to-day execution of our audit and certification programs which include: SOX ITGC / ITAC, ISO 27001, SOC 2 Type II, NIS2, EU Cyber Resilience Act, and Cyber Essentials Plus. Also to help extend our coverage into emerging regulatory and AI governance requirements.

What you'll do

• Audit leadership & SOX
• Act as primary audit liaison: lead walkthroughs, manage PBC / evidence requests, translate auditor follow-ups into defined requirements for control owners
• Coordinate evidence across key systems, including ERP, data and analytics platforms, and change-management tooling. Covering privileged access, change management
• Maintain segregation of duties within the team's test / review / sign-off model, performing control testing and secondary review as required
• Track and report control status, remediation items and prior-year improvement opportunities to GRC leadership and Finance stakeholders

What you need

• 5–9 yrs of experience
• ISO 27001
• Risk management
• Compliance
• IAM
• SOX
• Internal audit
• Any graduate

Good to have

• CISA
• CISSP
• CISM
• ERP
• SOP writing