InfoSec GRC - Senior Manager

ABB is seeking a Senior Manager for InfoSec Governance, Risk, and Compliance to strengthen how security and compliance are operated across EL Security and US/North America. Reporting to the Head of IS Security, Risk and Compliance, this role helps establish governance and assurance practices that move beyond one-time certification into ongoing, control-owned compliance service delivery for information systems projects.

Based in Cary, NC with a hybrid work model, the position supports multi-team governance, risk reporting, control attestations, and remediation processes, while aligning project execution with “security by design” expectations.

Responsibilities

• Serve as a service owner to transition compliance from one-time certification into a sustainable, operationalized compliance service with ongoing control ownership, evidence management, assurance reporting, and remediation processes across US and North America operations.
• Design and oversee multi-layered governance frameworks spanning EL Security, Risk & Compliance teams and relevant stakeholders in business, division, and country IS teams.
• Maintain a Security & Compliance dashboard that aggregates risk metrics from global and local security services, governs risk assessments, and ensures periodic control attestations and compliance monitoring.
• Govern EL security project design, development, and delivery using risk-driven guidance to ensure “security by design” across all EL Information Systems projects.
• Oversee implementation of security controls across EL and EL assets across countries and divisions.
• Contribute to the EL IS SRC Roadmap development, align security services with the Corporate IS Security Roadmap, and deliver periodic security posture reports to senior leadership.
• Establish risk-focused metrics for security service delivery and project execution, and maintain internal policies and standards aligned with ABB regulations.
• Facilitate multi-country compliance by working with the EL IS compliance team, supporting external audits, and coordinating vendor engagement across EL.
• Drive continuous improvement of security services, implement security awareness campaigns, and address issues originating from audit findings.

Requirements

• Bachelor’s or Master’s degree in Information Technology, Computer Science, Software Engineering or a related qualification, and/or demonstrated capability through past employment experience.
• 15+ years of Information Security experience, including at least 10 years leading governance, risk, projects, and communications.
• Strong experience in security governance and risk from design, launch, and maintenance.
• Experience with common information security management frameworks, including ISO 2700x, NIST 800-53, and Cybersecurity Maturity Model Certification (CMMC).
• Experience defining and running compliance-as-a-service, including CMMC post-certification operations, assurance reporting, control evidence management, remediation governance, and stakeholder enablement across US business areas.
• Excellent leadership skills for managing and motivating distributed teams and building relationships with internal and external stakeholders.
• Strong knowledge of information security management and governance, IT risk assessment and management, IT Audit, and the context of business processes and IS technologies.
• Related Project Management experience.
• Security Certification (CISSP, CISM, CRISC, etc.) and/or Auditor certifications (ISO 27001 auditor, CISA etc.) is mandatory.
• Excellent written and verbal communication skills, with the ability to present complex technical topics to diverse audiences including senior management.
• Work authorization to work in the US.

Technologies

• ISO 2700x
• NIST 800-53
• Cybersecurity Maturity Model Certification (CMMC)
• CMMC
• CISSP
• CISM
• CRISC
• ISO 27001 auditor
• CISA

Benefits

• Choice between two medical plan options: A PPO plan called the Copay Plan, or a High Deductible Health Plan (with a Health Savings Account) called the High Deductible Plan.
• Choice between two dental plan options: Core and Core Plus.
• Vision benefit.
• Company paid life insurance (2X base pay) and company paid AD&D (1X base pay).
• Voluntary life and AD&D (100% employee paid up to maximums).
• Short Term Disability up to 26 weeks (company paid) and Long Term Disability at 60% of pay (company paid), with ability to “buy-up” to 66 2/3% of pay.
• Supplemental benefits (100% employee paid): Accident insurance, hospital indemnity, critical illness, pet insurance.
• Paid Parental Leave and an Employee Assistance Program.
• Health Advocate support resources for mental/behavioral health, general health navigation and virtual health, and infertility/adoption.
• Employee discount program.
• 401k Savings Plan with Company Contributions and Employee Stock Acquisition Plan (ESAP).
• 11 paid holidays and vacation under a permissive time away policy for salaried exempt positions.

Position report: Head of IS Security, Risk and Compliance.

Work model: #LI-hybrid.

Business area: Electrification Business Area division in Cary, NC.

ABB Benefit Summary for EL eligible US employees: excludes ABB E-mobility, Athens union, Puerto Rico. Learn more at MyBenefitsABB.com by clicking “Candidate/Guest”.