Cybersecurity Compliance Program Manager
- Chicago, United States
- $104K – $162K /yr
- Mid Level
- Bachelor's degree
- Posted
Skills
Required
- cybersecurity
- evidence packages
- CMMC
- SP
- ISO/IEC 27001
- infrastructure
- Microsoft 365
Preferred
- operational technology
- product development
- complex supply chains
- GRC
- ticketing
- evidence-management
- configuration-management
- compliance-automation
- CISSP
About Littelfuse
- LFUS) is a diversified industrial technology manufacturing company shaping solutions for the safe and efficient transfer of electrical energy.
- Headquartered in Chicago, Illinois, USA, we serve customers across industrial, transportation, and electronics markets worldwide.
- With approximately 16,000 employees we design and manufacture innovative technologies that support electrification, energy efficiency, and advanced automation.
- Our global reach is matched by a culture that empowers innovation and long-term growth.
- Guided by our principles We Care, We Succeed With Our Customers, and We Own the Outcome, we work collaboratively, think boldly, and deliver solutions that move industries forward.
- At Littelfuse, we support employee growth and development.
- Guided by our culture principles, our teams work together to deliver value for customers and make a positive impact in the communities where we operate.
Responsibilities
- Reporting directly to the Chief Information Security Officer (CISO), the Cybersecurity Compliance Program Manager is a hands-on, player-coach leader who owns the company’s compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements.
- This individual translates requirements into practical controls and personally creates or improves the processes, policies, procedures, standards, templates, and evidence needed for continuous audit readiness.
- The ideal candidate combines program leadership with direct execution across cybersecurity, infrastructure, applications, governance, and risk—setting direction while developing deliverables, resolving gaps, and driving implementation, certification, remediation, and continuous improvement.
- Own, build, and execute the compliance portfolio: Lead applicable requirements and personally develop roadmaps, governance, workplans, milestones, accountability, and readiness routines—not only coordinate them.
- Create and maintain the compliance operating system: Draft and implement processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
- Lead audits and reviews; assess controls and evidence, document gaps, develop corrective actions, and validate sustainable closure.
- Translate requirements into implementable controls and work hands-on across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
- Develop or improve system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.
- Coordinate global technology, manufacturing, legal, contracts, audit, procurement, and business teams while creating missing deliverables and removing barriers.
- Track supplier and subcontractor compliance and advise management on CMMC and contractual flow-down requirements.
- Provide executives with clear readiness and risk metrics, monitor regulatory change, maintain incident response plans, and reinforce compliance ownership through guidance and awareness.
Requirements
- Qualifications Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
- Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
- Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements associated with government, defense, regulated, or export-controlled information.
- Broad, hands-on experience across infrastructure, networks, Linux and Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.
- Hands-on experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.
- Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.
Preferred
- Qualifications Experience in a global manufacturing company, including plants, operational technology, engineering, product development, and complex supply chains.
- Experience harmonizing multiple frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.
- Relevant certification such as CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP.
- Leadership and Success Measures Hands-on ownership and execution: Sets direction, creates missing processes and documentation, works directly through complex gaps, builds alignment, and holds owners accountable.
Pay
$104,400 - $161,760 The salary offered will vary depending on your location, job-related skills, knowledge, and experience.
Benefits
- We are an equal opportunity employer committed to fostering an inclusive workplace where everyone has the opportunity to grow and contribute.
- We offer competitive compensation and benefits, performance-based incentives, flexible work arrangements, and development opportunities.
Program outcomes
Controls and documentation are implemented, assessments are achieved on schedule, findings are sustainably closed, evidence remains audit-ready, and leaders have timely visibility. #LIOB1 Artificial intelligence (AI) tools may be used in some portions of the candidate review process for this position, however, all final employment decisions will be made by a person.
jobapplier