<div>Description</div><div>HYDAC is a family-owned and operated business with a vibrant and rewarding working environment for our employees across the country. Our goal is to provide quality products, components and services that meet our customer expectations while being committed to the protection and preservation of our environment. HYDAC’s passionate team designs and manufactures a comprehensive line of innovative and reliable solutions optimized for any demand our customers require.  The GRC Analyst will join an organization with flat hierarchies, high dynamics, and quick decisions. You will become a member of a young and dedicated team. In this role, you will be a subject matter expert in the team as well as in the whole organization for the continuous development of our Information Security Management System, and its rollout to other HYDAC entities. Furthermore, you will be responsible for internal ISMS audits according to country specific standards such as TISAX, ISO2700x and NIST. You will report to Information Security Manager located in the USA, while assisting the global team. The position will require up to 25% travel including the possibility of international travel. You will make an impact in this role by:<ul><li>Support the further development of the information security management system (ISMS).</li><li>Create and maintain the information security guidelines and concepts together with the IT security team.</li><li>Support the development and maintenance of information security policies, procedures, standards, controls, and other related documents.</li><li>Creation of threat and risk analyses.</li><li>Coordinate updates to training materials that support the information security policies and procedures.</li><li>Setup of training schedules for all Employees and provide KPI’s on completion and success.</li><li>Carry out internal TISAX, ISO2700x, NIST (CMMC) and ISMS audits worldwide.</li><li>Coordinate and lead interactions with internal and external cyber security auditors.</li><li>Support cyber security maintenance and continuous improvement activity identified through internal processes or cyber security related audits.</li><li>Coordinate interactions with internal and external cyber security auditors.</li><li>Support reporting related to information security key performance indicators and status reporting.</li><li>Support business continuity planning, cyber security incident response and management. Coordinate incident response plan creation and updates.</li><li>Support the enterprise as an information security subject matter expert.</li><li>Execute control activities to evidence our compliance with IT controls.</li><li>Consult management, teams, and individuals to provide strategic and tactical direction regarding enterprise information security requirements, policies, procedures, and standards.</li><li>Assist with the operational duties of the ISMS team.</li><li>Perform other duties as assigned.</li></ul> </div>HYDAC is a family-owned and operated business with a vibrant and rewarding working environment for our employees across the country. Our goal is to provide quality products, components and services that meet our customer expectations while being committed to the protection and preservation of our environment. HYDAC’s passionate team designs and manufactures a comprehensive line of innovative and reliable solutions optimized for any demand our customers require.  The GRC Analyst will join an organization with flat hierarchies, high dynamics, and quick decisions. You will become a member of a young and dedicated team. In this role, you will be a subject matter expert in the team as well as in the whole organization for the continuous development of our Information Security Management System, and its rollout to other HYDAC entities. Furthermore, you will be responsible for internal ISMS audits according to country specific standards such as TISAX, ISO2700x and NIST. You will report to Information Security Manager located in the USA, while assisting the global team. The position will require up to 25% travel including the possibility of international travel. You will make an impact in this role by:<ul><li>Support the further development of the information security management system (ISMS).</li><li>Create and maintain the information security guidelines and concepts together with the IT security team.</li><li>Support the development and maintenance of information security policies, procedures, standards, controls, and other related documents.</li><li>Creation of threat and risk analyses.</li><li>Coordinate updates to training materials that support the information security policies and procedures.</li><li>Setup of training schedules for all Employees and provide KPI’s on completion and success.</li><li>Carry out internal TISAX, ISO2700x, NIST (CMMC) and ISMS audits worldwide.</li><li>Coordinate and lead interactions with internal and external cyber security auditors.</li><li>Support cyber security maintenance and continuous improvement activity identified through internal processes or cyber security related audits.</li><li>Coordinate interactions with internal and external cyber security auditors.</li><li>Support reporting related to information security key performance indicators and status reporting.</li><li>Support business continuity planning, cyber security incident response and management. Coordinate incident response plan creation and updates.</li><li>Support the enterprise as an information security subject matter expert.</li><li>Execute control activities to evidence our compliance with IT controls.</li><li>Consult management, teams, and individuals to provide strategic and tactical direction regarding enterprise information security requirements, policies, procedures, and standards.</li><li>Assist with the operational duties of the ISMS team.</li><li>Perform other duties as assigned.</li></ul> Requirements To be considered for the GRC Analyst role, you must have the following minimum qualifications:<ul><li>Successfully completed a degree in computer science, IT security, engineering or comparable professional experience.</li><li>You also have a high affinity for information security.</li><li>Ideally, you have already gained experience in conducting audits (TISAX, NIST/CMMC, ISO27001).</li><li>Team player and the ability to work effectively in an interdisciplinary team.</li><li>Effective interpersonal and customer relationship skills.</li><li>English fluently, German is a plus.</li></ul> Due to access to government customer information, US citizenship is required. This is an in-office position in Bethlehem, PA. Relocation is not offered for this position. HYDAC offers employees a comprehensive medical/dental/vision plan, paid holidays, PTO, 401k with company matching, FSA account, short term disability and life insurance, and pet insurance.  Click the “apply” button to be considered for this opening! HYDAC is committed to providing equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

HYDAC stands for hydraulics, systems and fluid engineering. With more than 9,500 employees, 50 subsidiaries and more than 500 service partners HYDAC is a worldwide reliable partner in fluid technology. The product range extends from components over subsystems to complex, controlled drive units for mobile and stationary units. In addition, we offer our customers a large package of technical services around the HYDAC Fluid Engineering for hydraulic oil, lubricants, cooling lubricants and water. Our target focuses to increase the availability of machines and installations and to reduce the operating costs of our customers. The development focuses on Predictive Maintenance, Condition Monitoring, E-Mobility, energy-efficient hydraulics as well as process transparency, electrification and functional Integration. HYDAC invests annually approx. 5 % of turnover in R&amp;D activities. As well as developing new innovative products, we are also constantly improving on current technology. The company&rsquo;s own research and development work is complemented by the exchange of technology with institutes and universities. The HYDAC group has a competent worldwide network as well as a high quality standard and customer orientation and thus fulfills the high requirements of the international market.&nbsp;

GRC Analyst (in-office)

<div>Description</div><div>HYDAC is a family-owned and operated business with a vibrant and rewarding working environment for our employees across the country. Our goal is to provide quality products, components and services that meet our customer expectations while being committed to the protection and preservation of our environment. HYDAC’s passionate team designs and manufactures a comprehensive line of innovative and reliable solutions optimized for any demand our customers require.  The GRC Analyst will join an organization with flat hierarchies, high dynamics, and quick decisions. You will become a member of a young and dedicated team. In this role, you will be a subject matter expert in the team as well as in the whole organization for the continuous development of our Information Security Management System, and its rollout to other HYDAC entities. Furthermore, you will be responsible for internal ISMS audits according to country specific standards such as TISAX, ISO2700x and NIST. You will report to Information Security Manager located in the USA, while assisting the global team. The position will require up to 25% travel including the possibility of international travel. You will make an impact in this role by:<ul><li>Support the further development of the information security management system (ISMS).</li><li>Create and maintain the information security guidelines and concepts together with the IT security team.</li><li>Support the development and maintenance of information security policies, procedures, standards, controls, and other related documents.</li><li>Creation of threat and risk analyses.</li><li>Coordinate updates to training materials that support the information security policies and procedures.</li><li>Setup of training schedules for all Employees and provide KPI’s on completion and success.</li><li>Carry out internal TISAX, ISO2700x, NIST (CMMC) and ISMS audits worldwide.</li><li>Coordinate and lead interactions with internal and external cyber security auditors.</li><li>Support cyber security maintenance and continuous improvement activity identified through internal processes or cyber security related audits.</li><li>Coordinate interactions with internal and external cyber security auditors.</li><li>Support reporting related to information security key performance indicators and status reporting.</li><li>Support business continuity planning, cyber security incident response and management. Coordinate incident response plan creation and updates.</li><li>Support the enterprise as an information security subject matter expert.</li><li>Execute control activities to evidence our compliance with IT controls.</li><li>Consult management, teams, and individuals to provide strategic and tactical direction regarding enterprise information security requirements, policies, procedures, and standards.</li><li>Assist with the operational duties of the ISMS team.</li><li>Perform other duties as assigned.</li></ul> </div>HYDAC is a family-owned and operated business with a vibrant and rewarding working environment for our employees across the country. Our goal is to provide quality products, components and services that meet our customer expectations while being committed to the protection and preservation of our environment. HYDAC’s passionate team designs and manufactures a comprehensive line of innovative and reliable solutions optimized for any demand our customers require.  The GRC Analyst will join an organization with flat hierarchies, high dynamics, and quick decisions. You will become a member of a young and dedicated team. In this role, you will be a subject matter expert in the team as well as in the whole organization for the continuous development of our Information Security Management System, and its rollout to other HYDAC entities. Furthermore, you will be responsible for internal ISMS audits according to country specific standards such as TISAX, ISO2700x and NIST. You will report to Information Security Manager located in the USA, while assisting the global team. The position will require up to 25% travel including the possibility of international travel. You will make an impact in this role by:<ul><li>Support the further development of the information security management system (ISMS).</li><li>Create and maintain the information security guidelines and concepts together with the IT security team.</li><li>Support the development and maintenance of information security policies, procedures, standards, controls, and other related documents.</li><li>Creation of threat and risk analyses.</li><li>Coordinate updates to training materials that support the information security policies and procedures.</li><li>Setup of training schedules for all Employees and provide KPI’s on completion and success.</li><li>Carry out internal TISAX, ISO2700x, NIST (CMMC) and ISMS audits worldwide.</li><li>Coordinate and lead interactions with internal and external cyber security auditors.</li><li>Support cyber security maintenance and continuous improvement activity identified through internal processes or cyber security related audits.</li><li>Coordinate interactions with internal and external cyber security auditors.</li><li>Support reporting related to information security key performance indicators and status reporting.</li><li>Support business continuity planning, cyber security incident response and management. Coordinate incident response plan creation and updates.</li><li>Support the enterprise as an information security subject matter expert.</li><li>Execute control activities to evidence our compliance with IT controls.</li><li>Consult management, teams, and individuals to provide strategic and tactical direction regarding enterprise information security requirements, policies, procedures, and standards.</li><li>Assist with the operational duties of the ISMS team.</li><li>Perform other duties as assigned.</li></ul> Requirements To be considered for the GRC Analyst role, you must have the following minimum qualifications:<ul><li>Successfully completed a degree in computer science, IT security, engineering or comparable professional experience.</li><li>You also have a high affinity for information security.</li><li>Ideally, you have already gained experience in conducting audits (TISAX, NIST/CMMC, ISO27001).</li><li>Team player and the ability to work effectively in an interdisciplinary team.</li><li>Effective interpersonal and customer relationship skills.</li><li>English fluently, German is a plus.</li></ul> Due to access to government customer information, US citizenship is required. This is an in-office position in Bethlehem, PA. Relocation is not offered for this position. HYDAC offers employees a comprehensive medical/dental/vision plan, paid holidays, PTO, 401k with company matching, FSA account, short term disability and life insurance, and pet insurance.  Click the “apply” button to be considered for this opening! HYDAC is committed to providing equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

GRC Analyst (in-office)

About the Job

About the Company

HYDAC

Similar Jobs

IT Site Manager (Industrial Solutions)

IT Site Manager (Industrial Solutions)

Associate Project Manager – IT

Associate Project Manager – IT

ITSS Field Support Analyst

ITSS Field Support Analyst

IT SOX ERP Compliance Specialist

IT SOX ERP Compliance Specialist

Sr. Manager GRC

Sr. Manager GRC

IT Field Support Analyst - Tier II

IT Field Support Analyst - Tier II

Cybersecurity & Compliance Administrator

Cybersecurity & Compliance Administrator

Security Engineer (all genders)

Security Engineer (all genders)

CIP NERC Compliance Analyst

CIP NERC Compliance Analyst

Security Operation Center (SOC) Analyst

Security Operation Center (SOC) Analyst