At Trane Technologies® we Challenge Possible. Our brands – including Trane® and Thermo King® - create access to cooling and comfort in buildings and homes, transport and protect food and perishables, connect customers to elevated performance with less environmental impact, dramatically reduce energy demands and carbon emissions, and innovate with a better world in mind. We boldly challenge what’s possible for a sustainable world.
Job Summary:
As part of the Cybersecurity Governance, Risk, and Compliance (GRC) team, the Cybersecurity Compliance Lead will be responsible for developing, implementing, and overseeing the cybersecurity compliance program that ensures the organization adheres to relevant security standards & regulations such as NIST, Fed-RAMP, ISACA, and NYDFS.
The ideal candidate for this role has both the technical expertise and leadership skills to influence and seamlessly collaborate across multiple stakeholder groups.
Principal Responsibilities
- Responsible for planning, leading, and managing compliance related activities such as conducting assessments, audits, testing, and issue remediation related to NIST, Fed-RAMP, ISACA and other relevant requirements.
- Maintain compliance framework assessment toolkits used in testing and validation procedures.
- Monitor updates to relevant security frameworks and adjust program requirements as needed and reports changes to leadership.
- Monitor activities to ensure compliance with internal policies, standards, processes, and procedures.
- Ability to manage and coordinate all aspects of compliance operation including tactical & strategic planning, reporting, resource allocation, coaching, mentoring, delivering reviews, setting objectives, etc.
- Collaborate effectively within Digital Risk, various IT, and global business teams as well as other internal/external partners to build relationships supporting accountabilities.
- Implement continuous improvement on digital compliance related processes and procedures.
- Communicate complex information, concepts, and metrics in a confident and well-organized manner through verbal, written, and visual means, and tailored to the audience including multiple levels of leadership.
- Proficient understanding of business focus and processes and the ability to inject cybersecurity compliance into the business through teamwork and influence.
- Ability to maintain a high level of integrity, trustworthiness, and confidence to represent the company and security leadership with the highest level of professionalism.
- Excellent project management, personal and organizational skills.
Qualifications
- Bachelor’s degree in IT or equivalent technical field
- Proven track record of success in IT or corporate/shared services, with a minimum of 8 years of experience
- Experience with IT control frameworks, such as NIST-CSF, NIST 800-53, ISO27001, PCI, ISACA, Fed-RAMP
- In-depth knowledge of governance, risk, and compliance best practices
- Experience in IT Project and Program Management
- Strategic thinker with ability to proactively plan and roll up program activities.
- Change management and strategic communications background/experience.
- Demonstrated success in delivering large scale complex programs/projects and initiatives.
- At least one of the following certifications preferred: CISM, CISSP, CISA, CRISC, PMP
We offer competitive compensation and comprehensive benefits and programs. We are an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, age, marital status, disability, status as a protected veteran, or any legally protected status.
