Job Overview

The ideal candidate for the Senior Manager, Cybersecurity & IT GRC role will have a strong desire to be part of a information security team in a high-volume, dynamic environment with sufficient experience to hit the ground running. This individual will focus on the execution and coordination of IT security governance, risk & compliance processes related to a broad range of business requirements and government/industry regulations.

The Senior Manager, Cybersecurity & IT GRC will play a key role in identifying, assessing, and mitigating risks while ensuring compliance with laws, regulations, and standards. You will play a pivotal role in shaping and advancing our cybersecurity posture and risk management framework. This position entails a blend of strategic leadership and hands-on execution across various cybersecurity and GRC initiatives.

The Senior Manager, Cybersecurity & IT GRC is a leader in the Governance, Risk and Compliance (GRC) team within TE’s Security & Risk Management (SRM) function. The SRM function is part of TEIS (TE Information Solutions) and has global responsibility for cyber/information security, technology risk and controls, IT Compliance, audit & assurance, and related areas across TE Connectivity.

RESPONSIBILITIES

• Spearhead the development, implementation or enhancement of programs to manage cybersecurity & IT governance, risk, and compliance across the global organization.
• Serve as a key advisor to senior management in Business Units and Corporate Functions on cybersecurity & IT GRC matters, helping to shape strategic decisions.
• Manage, coach and develop less experienced GRC team members across the globe.
• Lead the global IT compliance function to manage key compliance obligations related to Information Security and data. Ensure compliance with local, state, federal, and international laws and regulations relevant to cybersecurity and TE’s IT operations. Collaborate with senior management to integrate compliance controls into existing business practices.
• Lead the IT Risk Management function within TE Connectivity by conducting risk assessments, identifying potential areas of vulnerability and risk, and developing/implementing risk treatment plans.
• Lead and manage third-party cyber-risk management program including supplier security reviews, contract management, and related activities.
• Lead IT and security control governance, management, gap analysis, and testing leveraging international frameworks and in support of TE’s risk & compliance programs
• Oversee and drive the risk and security metrics program
• Lead the Security Awareness program within TE Connectivity by overseeing the development and delivery of security awareness programs including training and education on cybersecurity and information protection
• Oversee assurance activities including control validation, customer questionnaires, cyber-insurers, and internal & external audits
• Collaborate with Legal teams to ensure alignment regarding IT and Legal requirements to meet compliance obligations
• Identify gaps in the design and operating effectiveness of controls and identify opportunities for improvements that reduce risk and/or align TE with industry recognized internal control frameworks.

What your background should look like:

SKILLS & KNOWLEDGE

• Thought leader with demonstrated ability in setting strategic direction for cybersecurity & IT GRC initiatives in a global company, advising and influencing senior management, and inspiring a team towards achieving shared goals.
• Expertise in regulations relevant to IT security and compliance for a public, global manufacturing company (e.g., SOX; PCI; HIPAA: US and international privacy regulations; US and international cybersecurity regulations and export restrictions such as CMMC/DFARS, ITAR and UKML) and/or Controls Frameworks (e.g., COSO, COBIT, NIST CSF, ISF Standards of Good Practice, ISO 27001); and industry or regionally specific certifications (e.g., TISAX; CyberEssentials).
• General knowledge of information security and related technologies, including identity & access management; database, operating system, and network security; endpoint security; application security; data protection and leakage; vulnerability management; security logging and monitoring; etc.
• Experience with any of the following is a plus: BISO model; Archer GRC tool; manufacturing and OT/ICS systems; IT audit; risk management frameworks; and Kaizen/lean methodologies.
• Proven experience in leading and managing diverse teams across multiple geographies.
• Ability to be a change agent - identify opportunities for improvement, gain consensus, and execute on them. 
• Ability to work successfully in a cross-functional team environment.
• Bachelor’s degree in Management Information Systems, Information Technology, Engineering or related field
• A master’s degree with IT-related majors or relevant certification (e.g., CISA, CISSP, CRISC, CGEIT)
• Minimum of 7 years of experience in GRC roles, with at least 4 years in a management or leadership position.

Competencies