Cybersecurity Compliance Program Manager

Littelfuse is seeking a Cybersecurity Compliance Program Manager based in Chicago, IL to report directly to the CISO and lead the company’s cybersecurity compliance portfolio. This role translates security and regulatory requirements into practical controls, documentation, and audit evidence, driving continuous audit readiness across global teams and third parties.

Working in an onsite environment, you will lead assessments, remediation, and the hands-on implementation of technical controls across enterprise systems, while also strengthening processes to improve compliance execution over time.

Responsibilities

• Own, build, and execute the compliance portfolio by leading applicable requirements and personally developing roadmaps, governance, workplans, milestones, accountability, and readiness routines.
• Create and maintain a compliance operating system, including processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
• Perform assessments and drive remediation by leading audits and reviews, assessing controls and evidence, documenting gaps, developing corrective actions, and validating sustainable closure.
• Design and operationalize technical controls by translating requirements into implementable controls and working hands-on across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
• Strengthen and automate controls through system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.
• Lead cross-functional execution by coordinating global technology, manufacturing, legal, contracts, audit, procurement, and business teams, creating missing deliverables and removing barriers.
• Manage third-party obligations by tracking supplier and subcontractor compliance and advising management on CMMC and contractual flow-down requirements.
• Report, improve, and prepare by providing executives with readiness and risk metrics, monitoring regulatory change, maintaining incident response plans, and reinforcing compliance ownership through guidance and awareness.

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
• Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
• Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements tied to government, defense, regulated, or export-controlled information.
• Broad, hands-on experience across infrastructure and networks, Linux and Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.
• Hands-on experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.
• Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.

Technologies

• CMMC
• NIST SP 800-171
• ISO/IEC 27001
• ITAR
• Microsoft 365
• Linux
• Windows
• Active Directory
• Cloud
• SIEM
• SSPs
• Identity
• Incident response

Preferred Qualifications

• Experience in a global manufacturing company, including plants, operational technology, engineering, product development, and complex supply chains.
• Experience harmonizing multiple frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.
• Relevant certification such as CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP.

Leadership and Success Measures

• Hands-on ownership and execution: sets direction, creates missing processes and documentation, works directly through complex gaps, builds alignment, and holds owners accountable.
• Program outcomes: implements controls and documentation, achieves assessments on schedule, ensures findings are sustainably closed, keeps evidence audit-ready, and provides leaders timely visibility.

Compensation: USD 104,400 - 161,760 per year.