IT GRC Compliance Team Lead

Job Purpose

• As the Team Lead IT Compliance for American Honda Motor - North America Region, you will provide leadership for designing, implementing, and managing control and compliance teams and programs. This role will be expected to effectively manage daily operational tasks and security services for continuous improvement for all IT compliance activities which includes assessment, tracking, and reporting. This role is responsible for implementing and managing the organizations authoritative documents, compliance framework, procedures and processes relating to information security and privacy. Team Lead responsibilities will also include the creation of execution plans, coordinating resources, and performing management of team members, including the supervising of education requirements.
• The IT Compliance Team Lead has experience being an ambassador for a diverse security program. Knowing how to communicate clearly and succinctly to influence others without complete decision authority is a critical skill. In addition, they will have experience working with a broad set of individuals, such as engineers, program managers, compliance and risk managers, auditors, and senior leaders to accomplish desired objectives.
• The scope of this role is providing cybersecurity protection services to all 4 critical business environments: Enterprise IT (Offices, Data Centers, End User Devices), Manufacturing OT (Plants, Distribution Centers, Robots, IoT sensors), Connected Products and the Connected Ecosystem of 3rd party suppliers, dealers, service providers throughout the North America Region.

Key Accountabilities

Leadership and Producing Results: Knowledge of leadership practices and processes; ability to use strategies and skills to enlist others in setting, embracing and achieving objectives while having a long-term perspective of the future state of things and how to get there. Understanding of the criticality of getting things done in spite of current circumstances and the ability to utilize assigned resources and leverage back-channel resources (individuals or teams) to achieve or exceed planned outcomes.

Leads all IT compliance/regulatory initiatives, committee working groups and reviews. Coordinates with internal and external audit teams and regulators to ensure compliance.
Mentoring, managing, and motivating a high-performing team of managers and security professionals and setting clear priorities to achieve enterprise goals and KPIs.
Anticipates and manages difficult interpersonal situations and conflicts; resolves them to mutual satisfaction.
Consults within the team; seeks inputs from subordinates and considers all views while making decisions.
Identifies, recommends, develops, implements, and supports new technical solutions, tools, and processes to improve end-user experience, maximize business value and efficiencies as well as  

Analyze control gaps/findings and collaborate with owning teams to provide countermeasure documentation and presentations for leadership
Build and maintain relationships with individuals within and outside of IS
Compliance and Assurance: Knowledge of compliance and assurance processes, regulations and standards involving different systems; ability to facilitate the processes and assess and enhance the organization's internal controls with evolving compliance standards.

Develops, implements, and manages compliance programs and authoritative documents. Cross-references controls to all applicable regulations.
Develops IT Compliance program considering organization's IT operations, regulatory and legal requirements, and industry standards.
Explores scope for applying and monitoring IT Compliance regulations to different cloud infrastructures.
Monitors and advises on IT compliance guidelines and regulatory controls for technology and business projects.
Research and advises on appropriate IT compliance solutions based on organizational operations and IT architecture.
Evaluates inspection or compliance results and liaise with stakeholders and asset owners to identify reasons for gaps or non-compliance.
 

Evaluates stakeholder profiles, roles, claims and interests in an organization and how these may conflict. 

Workstyle

Hybrid: At least 2 days per workweek at the local office

#LI-Hybrid

Qualifications, Experience, and Skills

• IS related bachelor’s degree and/or equivalent work experience.
• Desired Certifications: GIAC Security Leadership, (ISC2) CISSP, CRISC, CISA, CISM

Other job-specific skills:

• Minium 12 years of IT business work experience
• 8+ years in a compliance practitioner role
• 5+ years of leading people
• IT Risk Management: Knowledge of tools, techniques, approaches, and processes of IT risk management; ability to apply risk management methods to information technology to manage IT risk.
• Sarbanes-Oxley (SOX) Compliance: Knowledge of the Sarbanes-Oxley Act (SOX); ability to implement business processes required to ensure compliance with its tenets.
• Internal Controls: Knowledge of concept, methods, and processes of internal control; ability to create, implement, evaluate, and enhance processes in internal controls.
• IT Governance: Knowledge of the accountability framework and processes used to encourage proper behavior in IT activities and operations; ability to implement IT systems and controls to meet business needs and requirements.
• Information Technology (IT) Security Policies: Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
• Data Privacy: Knowledge of data privacy; ability to protect an organization's data, particularly data privacy while storing, extracting, and circulating individual or business-related data.
• Stakeholder Management: Knowledge of stakeholder management techniques; ability to systematically identify stakeholders, analyze their needs and expectations, and implement various tasks to engage with them.
• Cross-Team Integration: Understanding of the importance of inter-team collaboration in breaking down silos and achieving business results; ability to lead employees from various functions to communicate, coordinate work across divisions, and collaborate in solving problems as one team.
• Problem Solving: Knowledge of approaches, tools, techniques for recognizing, anticipating, and resolving organizational, operational or process problems; ability

Visa sponsorship

This position is not eligible for any work visa sponsorship.