Lead Information Security Auditor (GRC)

The Lead Information Security Auditor (GRC) is a senior cybersecurity and risk management leader responsible for establishing, maintaining, and continuously improving the organization's cybersecurity governance, risk, and compliance program across product development, manufacturing, operational technology (OT), and enterprise IT environments. This role ensures the organization effectively manages cyber risk, complies with applicable regulatory and industry requirements, and maintains governance processes that protect intellectual property, patient safety, operational resilience, and business objectives. The position serves as a key liaison between cybersecurity, business leadership, quality and regulatory affairs, legal, audit, and external regulators to ensure security requirements are embedded throughout the organization's operations and product lifecycle. This role plays a critical part in enabling secure innovation, supporting regulatory readiness, managing enterprise cyber risk, and providing executive visibility into cybersecurity posture and compliance performance. Key Responsibilities: Cybersecurity Governance Lead the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance frameworks. Establish governance processes that align cybersecurity initiatives with business objectives and regulatory requirements. Maintain cybersecurity framework alignment with NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and applicab