> Markdown version of [/jobs/ext/2172619-it-grc-specialist](https://www.wearedevelopers.com/jobs/ext/2172619-it-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT GRC Specialist - **Company:** Hexagon Inc - **Location:** Tucson, AZ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Computer Engineering, Information Technology Audit, IT Management, Cloud Services, Tisax, Information Technology, RSA Archer Platform - **Published:** August 21, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18021915?backUrl=%2Fcareer%2F18021915%2FIt-Grc-Specialist-Arizona-Tucson ## About the Role Must Have: * Bachelor's degree in Computer Science, Computer Engineering, Management Information Systems, Information Technology, or a related field. Equivalent combinations of education, certifications, and experience will be considered. * 10+ years of experience working within large, complex IT environments. * Knowledge of information security standards and compliance requirements including ISO 27001, NIS2, NIST 800-171, CMMC, TISAX, and GDPR. * Experience with IT and information security technologies and controls including cybersecurity, networks, infrastructure, applications, cloud services, and enterprise platforms. * Proven experience in IT governance, risk management, and compliance. * Strong communication and interpersonal skills with the ability to work effectively with cross-functional stakeholders. Nice To Have: * Professional certifications such as CISSP, CISA, CRISC, CGEIT, ISO 27001 Lead Implementer, or similar. * Experience supporting global manufacturing, industrial technology, or multinational organizations. * Experience with GRC platforms, audit management tools, and compliance automation solutions. Key Success Factors: * Strong understanding of governance, risk, compliance, and information security principles. * Ability to build trusted relationships across IT, Information Security, Legal, Finance, Procurement, and business teams. * Strong analytical skills with the ability to identify risks and develop practical remediation strategies. * Excellent organizational skills with the ability to manage multiple audits, assessments, and compliance initiatives simultaneously. * Commitment to continuous improvement and operational excellence. * Ability to communicate complex compliance and risk concepts clearly to both technical and non-technical audiences. ## Description Hexagon's Autonomous Solutions division is looking for an IT GRC Specialist to join our team in Tucson, AZ. Reporting to the appropriate IT leadership team, this role will support Hexagon Autonomous Solutions' governance, risk, and compliance capability by ensuring IT systems, controls, and processes align with regulatory requirements, internal policies, and business-adopted standards while helping strengthen the security, integrity, and compliance posture of the organization., The Company: Hexagon is a global leader in digital reality solutions, combining sensor, software, and autonomous technologies. We are putting data to work to boost efficiency, productivity, quality, and safety across industrial, manufacturing, infrastructure, public sector, and mobility applications. Our technologies are shaping the production and people-related ecosystems to become increasingly connected and autonomous, ensuring a scalable, sustainable future., AsIT GRC Specialistyou will be responsible for these activities: Support the implementation and maintenance of security controls aligned with industry-standard frameworks including ISO 27001, COBIT, SOX, and NIST. * Conduct regular reviews of corporate policies and procedures while serving as a key liaison for internal and external IT audits. * Perform gap assessments against business-adopted standards, regulatory requirements, and compliance frameworks while supporting remediation planning and execution. * Establish and maintain reporting on compliance health, risk status, and governance activities for assigned projects and initiatives. * Administer and enhance GRC platforms and associated IT governance processes. * Serve as the primary point of contact for IT compliance, governance, and audit-related activities. * Develop and maintain IT policies, standards, procedures, and process documentation. * Lead IT risk assessment activities and support broader information security risk management initiatives. * Perform risk assessments, control effectiveness testing, and compliance evaluations. * Support third-party risk management activities through risk assessments and vendor review processes. * Develop and maintain security awareness training programs for new employees and annual compliance training initiatives. * Collect, evaluate, and organize evidence supporting audits, investigations, customer requests, and compliance inquiries. * Assist with the completion of customer security and compliance questionnaires. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)