Lead Information Security Auditor, GRC

🔥 12 hours ago

🐊 Florida – Remote

🐊 Florida – Remote

💵 $104.1k - $163.6k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

CONMED Corporation

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1970

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 Post-IPO Debt on 2022-05

Healthcare • Consulting • Logistics

CONMED Corporation is a global medical technology company that develops, manufactures, and sells surgical equipment and instruments specifically for Orthopedic, General, and Gastrointestinal (GI) surgery. The company focuses on innovation and has a wide range of products including surgical power tools, implants, electrosurgical units, and smoke evacuation solutions. Through its mission to support healthcare partners and improve patient outcomes, CONMED is dedicated to enhancing surgical efficiency and safety across various medical specialties.

📋 Description

• Lead the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance frameworks • Establish governance processes aligned with business objectives and regulatory requirements • Maintain alignment with NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and applicable industry regulations • Develop and present cybersecurity metrics, KPIs, KRIs, and risk dashboards to executive leadership • Facilitate cybersecurity steering committees and governance forums • Track remediation and ensure accountability for risk mitigation • Lead enterprise-wide cybersecurity risk assessments and risk management programs • Maintain a cyber risk register covering enterprise IT, manufacturing systems, cloud services, and connected medical devices • Evaluate risks involving patient safety, operational resilience, intellectual property, regulatory exposure, and business continuity • Perform risk assessments for new technologies, business initiatives, mergers, acquisitions, and strategic projects • Develop risk treatment plans and monitor mitigation efforts through completion • Translate technical security risks into business impact statements • Lead cybersecurity compliance efforts and coordinate internal audits, external audits, regulatory inspections, and customer security assessments • Manage evidence collection, control validation, remediation tracking, maturity assessments, and gap analyses • Partner with Internal Audit, Legal, Compliance, and Regulatory Affairs • Oversee audit findings and corrective action plans through closure • Lead third-party cybersecurity due diligence and risk assessments • Establish supplier security requirements and contractual security obligations • Evaluate supplier security posture and drive remediation and risk acceptance • Partner with Engineering, Product Development, Quality, and Regulatory Affairs on product security governance • Oversee cybersecurity risk assessments for medical and surgical devices • Support secure development governance and cybersecurity documentation • Facilitate coordinated vulnerability disclosure governance and vulnerability management oversight • Lead cybersecurity awareness, education, and compliance initiatives • Develop targeted awareness programs and support phishing awareness, policy compliance, and security training • Measure and report program effectiveness and compliance trends • Support business impact analyses, resilience planning, tabletop exercises, and cyber crisis management planning • Evaluate recovery capabilities and resilience controls • Provide leadership for cybersecurity governance, risk, and compliance initiatives • Mentor cybersecurity professionals • Serve as primary cybersecurity liaison for Audit, Compliance, Legal, Quality, and Regulatory Affairs • Present risk and compliance updates to executive leadership, committees, and external stakeholders • Support strategic cybersecurity planning and roadmap development

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, Risk Management, or related field (or equivalent experience) • 7+ years of experience in cybersecurity, information security governance, risk management, compliance, audit, or related disciplines • Experience developing and managing cybersecurity governance, risk, and compliance programs • Experience conducting risk assessments and managing enterprise risk registers • Experience supporting internal audits, external audits, and regulatory examinations • Strong understanding of cybersecurity frameworks and regulatory requirements • Experience in healthcare, medical device manufacturing, life sciences, or regulated industries • Deep knowledge of NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and third-party risk management practices • Experience managing enterprise GRC platforms such as ServiceNow GRC, Archer, OneTrust, or AuditBoard • Experience developing executive risk reporting, metrics, and board-level presentations • Familiarity with medical device cybersecurity regulations and product security risk management • Professional certifications preferred: CISSP, CRISC, CISM, CGRC (formerly CAP), CISA, ISO 27001 Lead Implementer or Lead Auditor • This position is not eligible for employer-visa sponsorship

🏖️ Benefits

• Competitive compensation • Excellent healthcare including medical, dental, vision and prescription coverage • Short & long term disability plus life insurance -- cost paid fully by CONMED • Retirement Savings Plan (401K) -- CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period • Employee Stock Purchase Plan -- allows stock purchases at discounted price • Tuition assistance for undergraduate and graduate level courses • Employee Referral Program incentives