Cybersecurity Compliance Manager - Hybrid

At Dow, we believe in putting people first and we’re passionate about delivering integrity, respect and safety to our customers, our employees and the planet.  

Our people are at the heart of our solutions. They reflect the communities we live in and the world where we do business. Their diversity is our strength. We’re a community of relentless problem solvers that offers the daily opportunity to contribute with your perspective, transform industries and shape the future. Our purpose is simple - to deliver a sustainable future for the world through science and collaboration. If you’re looking for a challenge and meaningful role, you’re in the right place. 

Dow has an exciting opportunity for a Cybersecurity Compliance Manager located in Midland, MI or Houston, TX. The role will align to Dow's Design Your Day approach and allows employees flexibility by choosing when to work remotely and when to attend on-site activities based on project work and role needs.

About you and this role

As a Cybersecurity Compliance Manager, you will own and supervise key compliance/governance processes and activities to ensure the continued protection of Dow’s enterprise IT environment. You will oversee the Compliance Operations function to ensure the organization’s GRC activities, controls, processes, and practices adhere to Dow’s security policies and standards. In this role, you will own and manage Dow’s IT security policies. You will also support both internal and external IT audits to verify that implemented IT controls protect corporate assets, ensure data integrity, and are aligned to Dow’s overall goals.

Responsibilities

• Acts as the Security SME for PCI-DSS Compliance activities
• Responsible for the day-to-day oversight of the ISS Compliance Operations team
• Owns and maintains Dow’s IT security policies
• Manages compliance and governance oversight over Cloud security processes and activities including health checks
• Owns and administers the ServiceNow GRC module
• Leads the automation of controls indicator tasks in ServiceNow GRC
• Oversees the periodic testing of implemented security controls
• Manages and improves governance over cybersecurity protection activities in the Manufacturing space
• Oversees third-party partners that provide security compliance services to Dow
• Owns and maintains GRC metrics and dashboards
• Supervises the assessments of independent service reports of critical IT service providers
• Supports risk management processes and activities as needed
• Documents processes and participates in both internal and external IT audits
• Oversees IT assurance activities
• Supports external compliance audits and certifications

Qualifications

• A minimum of a Bachelor’s degree, 8 years relevant experience, or relevant military experience at a U.S. E6 rank or Canadian Petty Officer 2nd Class or higher
• A minimum of 7 years of relevant IT compliance or audit experience
• A minimum requirement for this U.S. based position is the ability to work legally in the United States. No visa sponsorship/support is available for this position, including for any type of U.S. permanent residency (green card) process

Preferred Skills

• An interest in Information Security/Compliance/IT Audits
• Certification or the interest in becoming certified in CISSP/CISA
• IT security experience
• Excellent oral and written skills
• Familiarity with security frameworks e.g., NIST CSF, ISO, SOX, etc.
• Prior IT audit and compliance experience
• Prior experience with Security GRC tools e.g., ServiceNow GRC
• Team player
• Attention to detail
• Manage multiple initiatives
• Great communication skills
• Ability to pick up new items and concepts quickly

Additional notes

• This position does not offer relocation assistance

Benefits – What Dow offers you 

We invest in you. 

Dow invests in total rewards programs to help you manage all aspects of you: your pay, your health, your life, your future, and your career.  You bring your background, talent and perspective to work every day. Dow rewards that commitment by investing in your total wellbeing.  

Here are just a few highlights of what you would be offered as a Dow employee: 

• Equitable and market-competitive base pay and bonus opportunity across our global markets, along with locally relevant incentives. 
• Benefits and programs to support your physical, mental and emotional well-being, to help you get the care you need...when you need it. 
• Competitive retirement program that may include company-provided b