> Markdown version of [/jobs/ext/2711826-sr-manager-it-governance-risk-and-compliance](https://www.wearedevelopers.com/jobs/ext/2711826-sr-manager-it-governance-risk-and-compliance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Manager - IT Governance, Risk and Compliance - **Company:** Plexus Corporation - **Location:** Neenah, WI, United States - **Experience:** Expert - **Salary:** $129,500.0 - $194,300.0 - **Contract:** Permanent contract - **Skills:** Computing Platforms, Cyber Security, IT Management, CIS Benchmarks, Servicenow - **Published:** September 4, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/87298885/1 ## About the Role * Bachelor's Degree with 8 or more years of related experience is preferred. An equivalent combination of education and/or experience will be considered., * Advanced leadership experience in dynamic, fast paced environments. * Advanced decision making, problem solving, and prioritization skills. * Advanced verbal and written communication skills. * Good interpersonal, communication and leadership skills; ability to motivate people and manage resources effectively and work with business partners to achieve goals. * Business acumen, knowledge and professionalism; understand how a business operates with the ability to develop and articulate the value proposition of a new process. * Functional knowledge in project management skills. * Must be self-motivated with the ability to work independently and in a team environment. * Knowledge of industry-standard security frameworks (e.g., NIST CSF, ISO 27001, CIS Controls) and regulatory requirements (e.g., SOX, SEC, GDPR, HIPAA, CMMC). Preferred Qualifications: * Experience building an IT GRC function within a global organization. * Experience building an IT Third-Party Risk function within a global organization. * Industry recognized certifications such as the CRISC, CISA, CISSP, CISM, and/or CGEIT are preferred. * Experience in the use and administrative setup of GRC software platforms (e.g., Vanta, ServiceNow GRC). Physical Requirements: * Professional office environment with suitable lighting, comfortable temperatures, and low noise level. May require prolonged periods of sitting at a desk, using a computer, and other office equipment. Minimal physical activity is generally involved, emphasizing the importance of good posture and ergonomic workplace arrangements. ## Description + Develop and maintain the Cybersecurity GRC framework, policies, standards, and procedures in alignment with regulatory requirements (e.g., ISO 27001, NIST CSF, Cyber Essentials +, SOC 2, GDPR, CMMC Level 2,3) + Develop, maintain, and socialize IT and cybersecurity policies, standards, and procedures across the organization. + Oversee risk mitigation and the IT risk register, lead risk assessments. + Develop, and oversee IT control effectiveness. Experience with IT Control design review and validation. + Coordinate internal and external cybersecurity audits and assessments, tracking findings through remediation. + Oversee customer assessments and questionnaires. + Build, coordinate and oversee Third-Party risk management * Strategic Program Management and Continuous Improvement: Lead the execution of the multi-year GRC Program roadmap, tracking and reporting on key performance indicators (KPIs) and key risk indicators (KRIs) to executive leadership. Drive continuous improvement in security controls and GRC processes by implementing best practices and automating controls where feasible. * Talent Management and Core Values: Responsible to exemplify and hold their team accountable to demonstrating the Plexus Core Values. Leader will focus on evaluating potential, driving succession planning, and ensuring their employees receive the development and coaching required to realize their full potential. * All GT leaders are accountable for upholding the organization's cybersecurity posture by adhering to security policies and procedures, actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one) - [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company) - [Decode Your People: Using PCM to Build High-Performance Teams](https://www.wearedevelopers.com/videos/100194-decode-your-people-using-pcm-to-build-high-performance-teams) - [Robots are coming into the wild! Full-Stack Robotics Engineers, be ready!](https://www.wearedevelopers.com/videos/479-robots-are-coming-into-the-wild-full-stack-robotics-engineers-be-ready) ## Related Articles - [From developer to manager – what does it take to become an engineering manager?](https://www.wearedevelopers.com/magazine/42-from-developer-to-manager-what-does-it-take-to-become-an-engineering-manager) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)