jobapplier

Cybersecurity Compliance Program Manager

Littelfuse

Skills

Required

  • cybersecurity
  • evidence packages
  • CMMC
  • SP
  • ISO/IEC 27001
  • infrastructure
  • Microsoft 365

Preferred

  • operational technology
  • product development
  • complex supply chains
  • GRC
  • ticketing
  • evidence-management
  • configuration-management
  • compliance-automation
  • CISSP

About Littelfuse

  • LFUS) is a diversified industrial technology manufacturing company shaping solutions for the safe and efficient transfer of electrical energy.
  • Headquartered in Chicago, Illinois, USA, we serve customers across industrial, transportation, and electronics markets worldwide.
  • With approximately 16,000 employees we design and manufacture innovative technologies that support electrification, energy efficiency, and advanced automation.
  • Our global reach is matched by a culture that empowers innovation and long-term growth.
  • Guided by our principles We Care, We Succeed With Our Customers, and We Own the Outcome, we work collaboratively, think boldly, and deliver solutions that move industries forward.
  • At Littelfuse, we support employee growth and development.
  • Guided by our culture principles, our teams work together to deliver value for customers and make a positive impact in the communities where we operate.

Responsibilities

  • Reporting directly to the Chief Information Security Officer (CISO), the Cybersecurity Compliance Program Manager is a hands-on, player-coach leader who owns the company’s compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements.
  • This individual translates requirements into practical controls and personally creates or improves the processes, policies, procedures, standards, templates, and evidence needed for continuous audit readiness.
  • The ideal candidate combines program leadership with direct execution across cybersecurity, infrastructure, applications, governance, and risk—setting direction while developing deliverables, resolving gaps, and driving implementation, certification, remediation, and continuous improvement.
  • Own, build, and execute the compliance portfolio: Lead applicable requirements and personally develop roadmaps, governance, workplans, milestones, accountability, and readiness routines—not only coordinate them.
  • Create and maintain the compliance operating system: Draft and implement processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
  • Lead audits and reviews; assess controls and evidence, document gaps, develop corrective actions, and validate sustainable closure.
  • Translate requirements into implementable controls and work hands-on across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
  • Develop or improve system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.
  • Coordinate global technology, manufacturing, legal, contracts, audit, procurement, and business teams while creating missing deliverables and removing barriers.
  • Track supplier and subcontractor compliance and advise management on CMMC and contractual flow-down requirements.
  • Provide executives with clear readiness and risk metrics, monitor regulatory change, maintain incident response plans, and reinforce compliance ownership through guidance and awareness.

Requirements

  • Qualifications Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
  • Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
  • Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements associated with government, defense, regulated, or export-controlled information.
  • Broad, hands-on experience across infrastructure, networks, Linux and Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.
  • Hands-on experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.
  • Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.

Preferred

  • Qualifications Experience in a global manufacturing company, including plants, operational technology, engineering, product development, and complex supply chains.
  • Experience harmonizing multiple frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.
  • Relevant certification such as CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP.
  • Leadership and Success Measures Hands-on ownership and execution: Sets direction, creates missing processes and documentation, works directly through complex gaps, builds alignment, and holds owners accountable.

Pay

$104,400 - $161,760 The salary offered will vary depending on your location, job-related skills, knowledge, and experience.

Benefits

  • We are an equal opportunity employer committed to fostering an inclusive workplace where everyone has the opportunity to grow and contribute.
  • We offer competitive compensation and benefits, performance-based incentives, flexible work arrangements, and development opportunities.

Program outcomes

Controls and documentation are implemented, assessments are achieved on schedule, findings are sustainably closed, evidence remains audit-ready, and leaders have timely visibility. #LIOB1 Artificial intelligence (AI) tools may be used in some portions of the candidate review process for this position, however, all final employment decisions will be made by a person.