Apply Now

Information Security Program Lead

Cranberry Township, PA, US • Posted 9 hours ago • Updated 9 hours ago

Full Time

On-site

Fitment

Dice Job Match Score™

👾 Reticulating splines...

Job Details

Skills

Innovation
SAFE
Information Security Management
Gap Analysis
Documentation
Global Operations
Stakeholder Engagement
Reporting
Security Awareness
Business Process
Collaboration
Risk Management
Due Diligence
Software Development
Information Security Management System
NIST SP 800 Series
Data Security
Mapping
Communication
Supervision
Virtual Team
Cloud Security
Amazon Web Services
Microsoft Office
Artificial Intelligence
SAP GRC
Auditing
Risk Assessment
Management
ISO/IEC 27001:2005
Business Systems Interface
Computer Science
Information Security
CISM
CISA
CISSP
ISO 9000
Training
System On A Chip
Regulatory Compliance

Innovation
SAFE
Information Security Management
Gap Analysis
Documentation
Global Operations
Stakeholder Engagement
Reporting
Security Awareness
Business Process
Collaboration
Risk Management
Due Diligence
Software Development
Information Security Management System
NIST SP 800 Series
Data Security
Mapping
Communication
Supervision
Virtual Team
Cloud Security
Amazon Web Services
Microsoft Office
Artificial Intelligence
SAP GRC
Auditing
Risk Assessment
Management
ISO/IEC 27001:2005
Business Systems Interface
Computer Science
Information Security
CISM
CISA
CISSP
ISO 9000
Training
System On A Chip
Regulatory Compliance

Summary

Overview

Are you someone who is passionate, motivated, and driven to make a difference? If so, MSA Safety is the perfect fit for your career.

At MSA, SAFETY is who we are AND it is what we do. We are a purpose-driven company committed to deploying innovation and technology to deliver on our Mission to help protect people and assets all around the world. We continue to be relentless in our pursuit of solving our customers greatest problems so they can go home safe each and every day.

Are you in? Read on for more details about this particular role.

Responsibilities

ISMS Ownership & ISO 27001

Own and maintain the Information Security Management System (ISMS), ensuring alignment with ISO 27001:2022 requirements and organizational objectives
Lead and coordinate internal and external ISO 27001:2022 audits, including audit planning, execution, and follow-up
Conduct gap analyses, risk assessments, and risk treatment planning in line with ISO 27001 Annex A controls
Develop, review, and maintain information security policies, standards, and procedures

Multi-Framework Compliance

Drive and coordinate compliance activities across SOC 2 Type II, including control documentation, evidence collection, and readiness reviews in preparation for external assessments
Support CMMC 2.0 Level 2 readiness and compliance, including control implementation guidance aligned with NIST SP 800-171 and coordination for third-party assessment organization (C3PAO) engagements
Maintain working knowledge of NIST SP 800-171 requirements and their relationship to CMMC, supporting Controlled Unclassified Information (CUI) scoping and handling requirements
Ensure compliance activities reflect applicable regional data protection obligations, including GDPR and other jurisdiction-specific requirements relevant to global operations
Maintain a cross-framework control mapping to identify overlaps, reduce duplication of effort, and ensure consistent control coverage across ISO 27001, SOC 2, CMMC, and NIST

Global Governance & Stakeholder Engagement

Serve as a key point of contact for external certification bodies, auditors, and regulatory inquiries
Report on the state of the ISMS, compliance posture, and key risk indicators to senior management across global business units
Contribute to security awareness programs and training initiatives, adapting content for regional and cultural relevance where needed
Collaborate with cross-functional and geographically distributed stakeholders to embed security and compliance requirements into business processes

Third-Party & Engineering Collaboration

Support and collaborate with the Third-Party Risk Management (TPRM) function, providing GRC expertise on vendor risk assessments and due diligence processes
Work closely with the software development function to integrate compliance requirements into the Secure Software Development Lifecycle (SSDLC)

Qualifications

Required Skills / Knowledge / Abilities

Deep understanding of ISO 27001:2022 and associated standards (e.g., ISO 27002), including practical ISMS management experience
Solid grasp of GRC methodologies, control frameworks, and structured risk assessment practices
Working knowledge of SOC 2 (Trust Services Criteria) and readiness or audit support experience
Working knowledge of CMMC 2.0 and/or NIST SP 800-171, including their application to CUI environments and U.S. federal compliance obligations
Familiarity with GDPR or equivalent data protection regulations as they apply to global enterprise operations
Experience with cross-framework control mapping across two or more of the above frameworks
Excellent written and verbal communication skills - ability to translate complex compliance topics for both technical and non-technical audiences across different cultural and organizational contexts
Proven ability to work independently and drive compliance initiatives with minimal supervision in a globally distributed team environment

Preferred Skills

Hands-on experience with SOC 2 Type II audit support and evidence collection
Direct involvement in CMMC readiness activities or C3PAO-facilitated assessments
Knowledge of cloud security controls, particularly in AWS and Office 365 environments
Familiarity with AI-enhanced GRC tooling and compliance automation approaches
Understanding of TPRM frameworks, vendor risk methodologies, and associated tooling
Familiarity with SSDLC principles and their integration with compliance requirements
Experience working across multiple time zones and jurisdictions in a multinational organization

Education & Experience

Required

Bachelor's degree in Computer Science, Information Security, or a relevant field
Demonstrated experience leading or supporting ISO 27001 certification or re-certification audits
Experience developing and implementing security policies and controls across multiple frameworks
Experience conducting structured risk assessments and managing risk treatment plans in complex, multi-jurisdictional environments

Preferred

ISO 27001 Lead Auditor or Lead Implementer certification (e.g., PECB, BSI, or equivalent)
Master's degree in Computer Science, Information Security, or a relevant field
Additional certifications such as CISM, CISA, CISSP, or ISO 27005 Risk Manager
Certifications or formal training in CMMC, NIST, or SOC 2 methodologies
Experience working in or supporting regulated industries subject to U.S. government compliance requirements

#LI-KH2

#LI-HYBRID

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: RTX159c00
Position Id: c4be42be1217c3a36bffe9a83cd7428f
Posted 9 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Staff Security Engineer

Remote

•

Today

Why Mozilla? Mozilla Corporation is the non-profit-backed technology company that has shaped the internet for the better over the last 25 years. We make pioneering brands like Firefox, the privacy-minded web browser. Now, with more than 225 million people around the world using our products each month, we're shaping the next 25 years of technology and helping to reclaim an internet built for people, not companies. Our work focuses on diverse areas including AI, social media, security and more.

Full-time

USD 163,000.00 - 218,000.00 per year

Senior GRC Manager

No location provided

•

Today

Position Title: Senior GRC Manager Position Location: Remote in the United States Job Summary: The Senior Governance, Risk, and Compliance (GRC) Lead is responsible for leading the organization's security governance program and operational cadence. Reporting to the Director of Information Security, this role oversees risk management, policy lifecycle management, control validation, audit readiness, evidence quality, and executive reporting across multiple compliance frameworks, including SOC 2

Full-time

Senior GRC Engineer

Remote

•

Today

The Problem As Flock scales its public safety platforms across cloud infrastructure and business operations, transforming compliance from a periodic audit exercise into a continuous, automated capability is essential. Maintaining customer trust and regulatory alignment across SOC 2, ISO, and privacy frameworks requires an engineering-driven approach to assurance. You will build scalable compliance processes, automate audit evidence collection, and embed continuous compliance frameworks directly

Full-time

USD 130,000.00 - 150,000.00 per year

Cyber Security - Senior Associate

Remote

•

Today

In today's dynamic environment, business leaders face constantly shifting risks. Riveron helps organizations implement leading governance, risk and compliance practices by combining deep expertise with pragmatic partnership, using a hands-on approach to understand the specific needs of the organization and create tailored solutions to address key compliance risks. Our Cyber Security Advisory (CSA) services include building GRC/Cybersecurity programs from the ground up, framework readiness, desi

Full-time

USD 84,000.00 - 117,000.00 per year

Search all similar jobs

More jobs at Mine Safety Appliances (MSA) in Cranberry Township, PA