ABB is seeking a Senior Manager for InfoSec Governance, Risk, and Compliance to strengthen how security and compliance are operated across EL Security and US/North America. Reporting to the Head of IS Security, Risk and Compliance, this role helps establish governance and assurance practices that move beyond one-time certification into ongoing, control-owned compliance service delivery for information systems projects.
Based in Cary, NC with a hybrid work model, the position supports multi-team governance, risk reporting, control attestations, and remediation processes, while aligning project execution with “security by design” expectations.
Responsibilities
- Serve as a service owner to transition compliance from one-time certification into a sustainable, operationalized compliance service with ongoing control ownership, evidence management, assurance reporting, and remediation processes across US and North America operations.
- Design and oversee multi-layered governance frameworks spanning EL Security, Risk & Compliance teams and relevant stakeholders in business, division, and country IS teams.
- Maintain a Security & Compliance dashboard that aggregates risk metrics from global and local security services, governs risk assessments, and ensures periodic control attestations and compliance monitoring.
- Govern EL security project design, development, and delivery using risk-driven guidance to ensure “security by design” across all EL Information Systems projects.
- Oversee implementation of security controls across EL and EL assets across countries and divisions.
- Contribute to the EL IS SRC Roadmap development, align security services with the Corporate IS Security Roadmap, and deliver periodic security posture reports to senior leadership.
- Establish risk-focused metrics for security service delivery and project execution, and maintain internal policies and standards aligned with ABB regulations.
- Facilitate multi-country compliance by working with the EL IS compliance team, supporting external audits, and coordinating vendor engagement across EL.
- Drive continuous improvement of security services, implement security awareness campaigns, and address issues originating from audit findings.
Requirements
- Bachelor’s or Master’s degree in Information Technology, Computer Science, Software Engineering or a related qualification, and/or demonstrated capability through past employment experience.
- 15+ years of Information Security experience, including at least 10 years leading governance, risk, projects, and communications.
- Strong experience in security governance and risk from design, launch, and maintenance.
- Experience with common information security management frameworks, including ISO 2700x, NIST 800-53, and Cybersecurity Maturity Model Certification (CMMC).
- Experience defining and running compliance-as-a-service, including CMMC post-certification operations, assurance reporting, control evidence management, remediation governance, and stakeholder enablement across US business areas.
- Excellent leadership skills for managing and motivating distributed teams and building relationships with internal and external stakeholders.
- Strong knowledge of information security management and governance, IT risk assessment and management, IT Audit, and the context of business processes and IS technologies.
- Related Project Management experience.
- Security Certification (CISSP, CISM, CRISC, etc.) and/or Auditor certifications (ISO 27001 auditor, CISA etc.) is mandatory.
- Excellent written and verbal communication skills, with the ability to present complex technical topics to diverse audiences including senior management.
- Work authorization to work in the US.
Technologies
- ISO 2700x
- NIST 800-53
- Cybersecurity Maturity Model Certification (CMMC)
- CMMC
- CISSP
- CISM
- CRISC
- ISO 27001 auditor
- CISA
Benefits
- Choice between two medical plan options: A PPO plan called the Copay Plan, or a High Deductible Health Plan (with a Health Savings Account) called the High Deductible Plan.
- Choice between two dental plan options: Core and Core Plus.
- Vision benefit.
- Company paid life insurance (2X base pay) and company paid AD&D (1X base pay).
- Voluntary life and AD&D (100% employee paid up to maximums).
- Short Term Disability up to 26 weeks (company paid) and Long Term Disability at 60% of pay (company paid), with ability to “buy-up” to 66 2/3% of pay.
- Supplemental benefits (100% employee paid): Accident insurance, hospital indemnity, critical illness, pet insurance.
- Paid Parental Leave and an Employee Assistance Program.
- Health Advocate support resources for mental/behavioral health, general health navigation and virtual health, and infertility/adoption.
- Employee discount program.
- 401k Savings Plan with Company Contributions and Employee Stock Acquisition Plan (ESAP).
- 11 paid holidays and vacation under a permissive time away policy for salaried exempt positions.
Position report: Head of IS Security, Risk and Compliance.
Work model: #LI-hybrid.
Business area: Electrification Business Area division in Cary, NC.
ABB Benefit Summary for EL eligible US employees: excludes ABB E-mobility, Athens union, Puerto Rico. Learn more at MyBenefitsABB.com by clicking “Candidate/Guest”.
