What are the responsibilities and job description for the Manager Cyber Security Governance & Compliance position at Generac Power Systems?
Company Generac Power Systems
Name Manager Cyber Security Governance & Compliance
Req # 62395
Employment Type Full Time
Shift 1st
At Generac, our people help make the world safer, brighter, and more productive. We are united by our efforts to inspire change for a better world; impact our people and community; influence and achieve positive results; and innovate the industry. Our shared goals allow people with diverse backgrounds and points of view to work together, bringing our global customers peace of mind through reliable products and exceptional support.
We are a team of hardworking builders and doers who share a passion for innovation and a desire to outpace others in our field. We push boundaries and seek opportunities for our products and people to evolve. As an inclusive workplace, we keep equity and respect at the forefront and empower employees to speak up, take accountability, and bring their best energy to work every day. At Generac, we collaborate, share successes, and promote a drive to win while respecting others and supporting growth.
The Cyber Security Governance and Compliance Manager will report to the Director Governance and Compliance. This role is a hands on manager position that will be responsible for managing staff on various initiatives as well as themselves performing detailed work. The Manager will be responsible for working with key stakeholders in IT and the business to drive and manage multiple Governance and Compliance initiatives. This Manager will be responsible for working with process and control owners to design, implement, and optimize the measurement of cybersecurity controls. The Manager will support IT Risk Management programs, support Generac's IT Risk Register, and support programs to effectively mitigate cybersecurity risks as they surface. The Manager will provide support and guidance to junior resources on a variety of initiatives, including but not limited to: 3rd party risk, PCI compliance, supporting financial and regulatory compliance requirements and audits, and internal compliance assessments to company policies and standards built upon industry frameworks such as NIST CSF and ISO 27001.
Essential Duties and Responsibilities:
- Will work closely with Director Cyber Security Governance and Compliance, junior Governance and Compliance team members, as well as key stakeholders in IT and the business on the following:
- Manage operational gap assessments against published policies and standards, and work with key stakeholders to develop and prioritize remediation plans where necessary.
- Manage risk assessments to identify potential IT compliance issues and to identify potential security threats and vulnerabilities, and work with key stakeholders and responsible parties to develop risk mitigation approaches.
- Provide coaching and guidance to junior team members, supporting upskilling of broader Cyber Security team.
- Work with stakeholders in the business to manage third party risk, through process enhancements as well as through use of current and future security tools. Understand business objectives to tailor third party risk objectives accordingly.
- Manage risk assessments of third-party suppliers and dealers to identify risks to Generac's IT environment, as well as risks to related business processes for suppliers and dealers.
- Manage process to identify compliance efforts needed to meet regulatory and industry requirements, including but not limited to SOX, PCI, NERC-CIP, Data Privacy, and others as necessary.
- Assist in creating, managing, and delivering training and awareness programs.
- Assist in management of Governance and Compliance related risk identification process, metrics reporting, and remediation/mitigation tracking
Minimum Job Requirements:
- Bachelor's degree with focus in IT
- 9-12 years of experience in IT Audit, Risk Management, and/or Governance and Compliance, depending on management experience within an industry leading consulting or auditing firm.
- Experience running SOX audits, either as external or internal audit, or as a Compliance Manager coordinating with control owners and audit teams.
Knowledge / Skills / Abilities:
- Excellent communication and collaboration skills, with the ability to work effectively with stakeholders at all levels of the organization.
- Strong understanding of IT and business processes, with the ability evaluate and/or implement IT controls and processes to manage cyber risks within those business processes.
- Strong analytical and problem-solving skills, with the ability to identify potential risks and develop effective solutions.
- PCI Compliance
- NERC-CIP
- Data Privacy
Preferred Job Requirements:
- Certified Information Systems Auditor, Certified Information Security Manager, or equivalent preferred but not required
Physical Requirements and Working Conditions: While performing the duties of this job, the employee is regularly required to talk and hear; and use hands to manipulate objects or controls. The employee is regularly required to stand and walk. On occasion, the incumbent may be required to stoop, bend, or reach above the shoulders. The employee must occasionally lift up to 25 pounds. Specific conditions of this job are typical of frequent and continuous computer-based work requiring periods of sitting, close vision, and the ability to adjust focus. Occasional travel.
Great Reasons to work for Generac:
- Competitive Benefits: Health, Dental, Vision, 401k and many more
- State-of-the-art facility with an onsite gym, walking trails, cafe, free parking and many employee activities
- Scheduled events throughout the year that allow our employees, both current and retirees, to gather together and enjoy their time with their families and co-workers
- Enjoy summer hours (Memorial Day - Labor Day)
- Pride! When a storm strikes, Generac employees always rise to the occasion. Each time a storm hits many employees volunteer their time with the customer support team or on the production line while others go right into storm-affected areas to repair generators
- We believe in having fun. From minor celebrations to major events, our employees balance their work by building a strong culture of teamwork and collaboration through a variety of occasions, including our Fun Days.
- Every day is Jeans Day! Dress for your day.
- Product loan and discount programs
"We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law."
Generac Power Systems Inc. is an equal opportunity employer/Minorities/Females/Vet/Disability.
Intern-Cyber Security Summer 2025
atcllc -
Pewaukee, WI
Cyber Security Lead (Medical Device)
Intellectt Inc -
Milwaukee, WI
Cyber Security Lead Engineer - Milwaukee, WI
Intellectt Inc -
Milwaukee, WI