Director, Governance, Risk, and Compliance - Global Industrial

The Director of Governance, Risk & Compliance (GRC) will lead the IT Risk and Compliance functions within the department; providing leadership and hands-on guidance across all security governance, risk, and compliance initiatives, while acting as the primary security liaison with IT Operations and Application Development teams on ongoing compliance efforts.

Responsibilities

Develops, implements, and manages an effective IT Risk Management program tailored to Motion's scale and risk profile, including formal risk assessments of projects, risk exception/acceptance process, technologies, processes, and third-party vendors; Identifies, assesses, and documents key IT risks and implement relevant controls to manage them; Monitors and continuously improves the effectiveness of controls protecting Motion's information assets; Coordinates third-party audits, including penetration tests, PCI, and SOX assessments; Manages compliance and awareness projects across operations, security, and development teams, ensuring alignment with regulatory and legal requirements relevant to Motion's business; Provides reports for board and audit committee updates; Oversees the execution and support for cyber insurance; Oversees vulnerability management processes - scanning, prioritization, and remediation tracking - and maintain visibility into Motion's external attack surface; Partners with other IT departments to ensure timely patching and remediation of identified vulnerabilities; Performs other duties as assigned

Requirements

Typically requires a bachelor's degree and fifteen (15) or more years of related experience; Typically requires seven (7) or more years diversified leadership, planning, communication, organization and people motivation skill; Knowledge of information security standards and regulations, including PCI-DSS, SOX, and NIST; Understanding of infrastructure and application security principles for risk identification and analysis; Experience with third-party IT security management; Experience leading security or privacy awareness programs; Excellent written, oral, and interpersonal communication skills with the ability to present ideas in business-friendly, accessible language; Highly self-motivated, with the ability to operate effectively in a hands-on organizational structure and to prioritize effectively against deadlines; Team-oriented and comfortable wearing multiple hats in a collaborative environment; CISSP, CISM, CISA, CIPP, or similar certifications; Practical experience managing Business Continuity and/or Incident Response programs; Experience working with vulnerability management and attack surface management tooling; Experience working with cloud, big data, and mobile technologies

Benefits

healthcare coverage; 401(k); tuition reimbursement; vacation, sick, and holiday pay