Senior Analyst, Cybersecurity Compliance

Ingersoll Rand is seeking a Senior Analyst, Cybersecurity Compliance to help support and mature the organization’s cybersecurity compliance program. This onsite role in Davidson, NC is built around providing regulatory subject matter expertise while partnering with multiple stakeholders to strengthen governance, frameworks, guidance, training, assessments, and reporting.

As a trusted advisor, you will help translate evolving cybersecurity and digital resilience requirements into repeatable processes that product and business teams can follow to achieve and maintain regulatory compliance. You will also monitor changes across relevant regulations and support readiness planning for what comes next.

Key Responsibilities

• Act as the primary subject matter expert for the EU Cyber Resilience Act (CRA), NIS2 Directive, EU Machinery Regulation, CMMC2, UK Cyber Essentials, and other emerging cybersecurity regulations.
• Develop and maintain compliance frameworks, guidance documents, assessment methodologies, templates, and tools to support cybersecurity compliance efforts.
• Interpret regulatory requirements and cybersecurity best practices for business stakeholders and compliance owners.
• Support cybersecurity policies, standards, procedures, and governance processes needed to meet compliance obligations.
• Create repeatable compliance processes so business functions and product teams can achieve and maintain regulatory compliance.
• Partner with business units, engineering, IT, procurement, legal, quality, and cybersecurity stakeholders to clarify and meet cybersecurity compliance obligations.
• Provide guidance, consultation, and implementation support for regulatory and compliance requirements.
• Develop and deliver training, awareness materials, workshops, and educational content related to cybersecurity regulations.
• Help identify compliance gaps and support remediation planning.
• Facilitate sharing of best practices and lessons learned across the organization.
• Monitor emerging and evolving cybersecurity, privacy, digital resilience, and technology regulations.
• Evaluate regulatory changes and communicate potential impacts to business stakeholders and cybersecurity leadership.
• Maintain awareness of applicable regulations, standards, and guidance documents to support future compliance obligations.
• Develop compliance readiness plans for new and upcoming regulatory requirements.
• Serve as a trusted advisor on regulatory developments impacting Ingersoll Rand products, services, operations, and third-party relationships.
• Support third-party cybersecurity review activities required to meet EU cybersecurity compliance requirements.
• Collaborate with procurement, legal, engineering, and cybersecurity teams to assess supplier cybersecurity capabilities and compliance posture.
• Assist with evaluating third-party providers, software suppliers, and cybersecurity-related supplier risks.
• Support collection and maintenance of compliance evidence related to third-party and supply chain requirements.
• Contribute to processes supporting cybersecurity compliance and third-party risk management objectives.
• Develop and maintain compliance metrics, dashboards, and executive reporting.
• Track compliance status, risks, remediation activities, and readiness efforts across business units.
• Prepare recurring status reports for cybersecurity leadership and business stakeholders.
• Support audits, assessments, customer inquiries, and regulatory reviews tied to cybersecurity requirements.
• Maintain visibility into compliance risks, issues, and remediation priorities.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, Compliance, Risk Management, or a related discipline.
• 5+ years of experience in cybersecurity, compliance, governance, risk management, regulatory compliance, product security, or a related field.

Technologies and Frameworks

• EU Cyber Resilience Act (CRA)
• NIS2 Directive
• EU Machinery Regulation
• CMMC
• UK Cyber Essentials
• CMMC2
• ISO 27001
• NIST CSF
• CISSP, CISM, CRISC, Security+
• ISA/IEC 62443
• UK Cyber Essentials Plus

Benefits

• Health care options including medical and prescription plans
• Dental and vision coverage
• Wellness programs
• Life insurance
• 401(k) plan
• Paid time off
• Employee stock grant

Core Competencies

• Product cybersecurity compliance and regulatory interpretation
• Governance process development and stakeholder enablement
• Risk assessment, issue tracking, and remediation coordination
• Executive reporting, metrics, and compliance readiness communication
• Collaboration across engineering, legal, procurement, quality, cybersecurity, and business teams

Work Arrangements

• Ability to work effectively across global teams and time zones.
• Limited travel may be required based on business, project, stakeholder, or assessment needs.