Cybersecurity GRC Manager

Cybersecurity GRC Manager

Location:

Pittsburgh, PA, US, 15222 Job Function: IT/Technical Job Country:
United States Job City:
Pittsburgh Job Type: Regular Full Time Excelitas is a global technology leader with more than 7,500 employees, focused on delivering market-driven solutions to fulfill the illumination, optical, detection and imaging needs of OEMs and end-users across the biomedical, semiconductor, industrial, consumer products, scientific, security, defense and aerospace sectors. ENGAGE with us today and make your contribution to the future! Join the team that leading technology companies turn to for cutting-edge photonic innovation.

At Excelitas Technologies you are how we EXCEL. We are presently seeking a Cybersecurity GRC Manager who will work out of our corporate headquarters in Pittsburgh, PA. and is committed to ensuring overall business success and corporate governance. In addition to a vast portfolio of high-performance photonic products and technologies, Excelitas offers single source convenience and reliability for integrated end-to-end photonic solutions… from light source to sensor, and everything in between.

We excel at delivering innovative and customized components, sub-assemblies and fully integrated photonic systems to meet the unique illumination, optronic, sensing and optical technology needs of global OEM customers.

Main responsibilities:

• Governance & Policy Development
• Compliance & Regulatory Assurance
• IT Security Risk Management
• GRC Team Management

Requirements:

• 5+ years of progressive experience in IT Security Governance, Risk & Compliance (GRC) or related disciplines
• Strong working knowledge of CMMC and NIST SP 800-171 requirements, SOX IT General Controls (ITGCs), Third-Party Risk Management (TPRM), and IT security risk management frameworks
• Demonstrated ability to develop and maintain security policies, procedures, and standards that are clear, enforceable, and audit-ready
• Hands-on experience supporting internal and external audits, including evidence preparation, walkthrough facilitation, and remediation of findings
• Strong analytical, organizational, documentation, and communication skills
• Proven ability to manage multiple concurrent work streams and drive activities to timely completion with minimal supervision
• U.S. Person status as defined under ITAR (22 CFR §120.62), required due to access to export-controlled information and Controlled Unclassified Information (CUI)

Preferred Qualifications:

• Experience in regulated environments such as a public company, defense, aerospace, manufacturing, or other highly regulated industries
• Familiarity with frameworks such as NIST SP 800-171, NIST SP 800-53, ISO/IEC 27001/27002, NIST CSF, COSO, COBIT
• Experience with GRC tools (e.g., Audit Board/Optro, Archer, ZenGRC, or similar)
• Working knowledge of safeguarding CUI and export control requirements (ITAR, EAR, DFARS )
• Experience with cloud security compliance in Microsoft 365 / Azure environments, including GCC-High
• Experience developing or maintaining System Security Plans (SSPs) and POA&Ms
• Professional certifications such as CISA, CISM, CRISC, CISSP, RP, CCP

Please Note:

This position requires the use of information which is subject to the International Traffic in Arms Regulations (ITAR) No relocation offered for this position Must be a US Persons/No sponsorship offered for this position Equal Opportunity/Affirmative Action Employer Equal opportunity employer;
Minorities/Females/Disability/Gender Identity/Sexual Orientation