Role OverviewThe Professional, Compliance Lead is a seasoned individual contributor within the Cybersecurity function, accountable for leading the cybersecurity compliance and governance agenda across DePuy Synthes.
What You Will Do
This role owns the policy and standards framework, sets the enterprise cyber risk methodology, leads risk assessments and register governance, and drives the reporting cadence that informs executive and Board-level decision-making.
Why It Might Be a Fit
Applying advanced knowledge of GRC frameworks and regulatory obligations, this role establishes best-in-class policies, procedures, and plans for the area.
Requirements
- 6 years of progressive experience in cybersecurity governance, IT risk management, technology compliance, or a related GRC discipline.
- Demonstrated ownership of a security policy and standards framework, including authorship, governance lifecycle, exception management, and stakeholder approval.
- Advanced working knowledge of NIST CSF, NIST 800-53, ISO 27001/27002, and COBIT, with the ability to rationalize requirements across multiple frameworks.
- Proven experience designing and operating a cyber risk assessment methodology and enterprise risk register at scale.
- Experience defining KRIs and building executive-level risk reporting that drives leadership decisions.
- Experience leading third-party/vendor cyber risk programs, including assessment standards, SOC 2 / ISO evidence review, and contractual security requirements.
- Strong facilitation and influencing skills, with a track record of driving accountability across senior stakeholders without direct authority.
Benefits
- Dental insurance
- Vision insurance
- Health insurance
- Paid time off
- Retirement plan
- Life insurance
- Disability insurance
- Travel reimbursement
- Professional development opportunities
]]>