IT Cyber Security Risk and Compliance Analyst

About ITT:

At ITT, we have a clear purpose as an organization – to provide our customers with cutting-edge solutions to help solve their most critical needs across key global end markets. Our continuous improvement mindset drives our commitment to evolving our capabilities as a multi-industrial technology, manufacturing and engineering leader. With a strong global footprint of more than 100 facilities, we are well positioned to solve critical challenges for our customers around the world. Our locations include manufacturing facilities and global service capabilities in 35 countries. Through these worldwide operations and building on our heritage of innovation, our approximately ~11,000 team members partner with our customers to deliver enduring solutions that make a lasting difference and help the world move forward. ITT is headquartered in Stamford, CT, with sales in approximately 125 countries. The company generated 2024 revenues of $3.6 billion. 

 

• Motion Technologies: (Revenue of $1.4B; headcount of ~ 4,000; operates in 13 countries) manufactures brake components and specialized sealing solutions, shock absorbers and damping technologies primarily for the global automotive, truck and trailer, public bus and rail transportation markets. 
• Industrial Process: (Revenue of $1.4B; headcount of ~3,400; operates in 30 countries) manufactures engineered fluid process equipment serving a diversified mix of customers in global industries such as chemical, energy, mining, and other industrial process markets and is a provider of plant optimization and efficiency solutions and aftermarket services and parts. 
• Connect and Control Technologies: (Revenue of $0.8B; headcount of ~ 3,800; operates in 10 countries) manufactures harsh-environment connector solutions, critical energy absorption, flow control components, and composite materials for the aerospace and defense, general industrial, medical, and energy markets.

 

Position Summary

Under the direction of the Manager Cyber Risk and Compliance, this individual plays a crucial role in bridging the gap between cybersecurity, IT, and business operations.  This person is expected to be both technically experienced and business aligned as s/he works with both IT and business stakeholders to assess the risk and compliance of existing solutions and new initiatives.

 

We are seeking an experienced Cybersecurity Risk and Compliance Analyst to join our team. The successful candidate will be responsible for a multitude of service lines within cybersecurity, including performing risk assessments, managing the awareness program, administering vulnerability management processes, represent the cybersecurity team in the execution of projects and initiatives, and maintaining cybersecurity dashboards / KPIs.

 

This role is responsible for ensuring that governance, risk and compliance projects are effectively and efficiently executed, as well as identifying areas for improvement across the cybersecurity GRC lines of service.

 

This individual will be highly driven (“high motor”), able to balance active priorities, be meticulous and planful. They will be comfortable addressing ambiguity, able to consistently deliver results, be naturally curious and highly accountable, and approach situations in a thoughtful and process-oriented manner. This person will work closely with individuals at all levels of the information technology organization and business partners (executives, peers, staff members, individual contributors, cross-functional team members) to identify risk and compliance gaps, provide guidance on remediation, and provide consultation on adherence to ITT security policy for all aspects of the global organization.

 

Essential Responsibilities

• Maintain the cybersecurity awareness training program, including web-based training modules and phishing simulations.
• Provide insights into emerging regulations and industry trends relevant to our sector and contracts.
• Work with business stakeholders to validate and maintain compliance with industry frameworks and regulatory requirements, such as CMMC, TISAX, etc.
• Develop metrics and dashboards to measure program effectiveness and report findings to leadership.
• Compile and present KPIs and KRIs related to cybersecurity and IT security functions.
• Collaborate with varying  IT teams to develop mitigation or remediation plans.
• Act in the role of Business Analyst to:
  • Collaborate with cross-functional teams to understand business processes, security needs, and compliance requirements.
  • Translate business needs into actionable security requirements.
  • Document existing processes and workflows, identifying security gaps and areas for improvement.
  • Provide business