Join Komatsu and Be Part of Something Big!
Job Overview
Are you passionate about building strong, scalable security programs that truly make an impact? We are seeking an IT Manager of Security Compliance to play a critical leadership role in advancing our global security program. In this role, you will lead governance, risk management, and compliance (GRC) initiatives, shaping and sustaining a robust governance framework that protects our organization and its people. You’ll partner closely with cross-functional teams to ensure alignment with security standards and drive key risk management processes across an environment supporting more than 14,000 IT users worldwide.
Key Job Responsibilities
Governance
· Support Cybersecurity Governance Committees by providing guidance, reporting, and action plans to meet organizational objectives.
· Develop and maintain IT security policies, standards, and procedures that align with CIS controls and regulatory requirements.
· Lead the implementation and up-keep of the organization's incident response plan to ensure quick, effective action in the event of a security breach.
· Collaborate with IT teams to manage and secure platforms such as O365, Azure, and Operational Technology (OT) systems.
· Oversee the preparation and completion of security questionnaire responses for clients and partners.
Risk Management
· Enhance the existing Cybersecurity Awareness Program, leveraging tools like KnowBe4, to educate employees and reduce organizational risk.
· Coordinate and lead the organization's Threat Risk Assessments (TRAs), ensuring alignment with industry best practices.
· Drive security posture maturity by implementing and monitoring security initiative projects.
· Support HR and Legal Teams in addressing insider threats and other security concerns.
· Oversee vulnerability management programs to ensure timely patching and mitigation of risks across IT and OT environments.
Compliance
· Manage and prepare for SOC2 certification efforts, aligning processes with CIS and other regulatory standards.
· Support audit requests, including preparation for cyber insurance assessments and compliance with privacy regulations (e.g., GDPR, CCPA).
· Provide compliance-related reporting to our parent company - Komatsu Limited (KLTD) - metrics, incident reporting, and tool usage analysis.
· Collaborate with Legal and IT teams to ensure compliance with data privacy regulations and support e-discovery efforts.
Qualifications/Requirements
- Bachelor’s degree in the IT/Information Security/Technology/legal or related field
- 7+ years of experience in Information Security and/or Data Privacy Compliance positions including 3+ years of prior people management
- Expertise in cybersecurity practice and compliance standards, eg. CIS, ISO27K, SOC1/2, SSAE 18, NIST CSF and PCI DSS is highly desirable
- Strong understanding of data privacy regulations eg. CCPA, GDPR, PIPEDA, UK DPA and Privacy Shield
- Strong understanding and experience in enabling GRC solutions and common control framework for cybersecurity and data regulations
- Certification(s) Preferred: Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT), CISA, CISM
- Excellent project management and process improvement skills
- Ability to work independently in a fast-paced environment and handle multiple complex & confidential tasks
- Excellent communication, interpersonal skills, especially the translation of cybersecurity and privacy concepts to all levels of the organization.
- Detail oriented, with a strong sense of accountability and a proactive mindset
- Demonstrated experience leading small teams and influencing broader organizational change.
- Strong analytical and problem-solving skills.
- Ability to navigate ambiguity and prioritize competing demands in a fast-paced environment
Additional Information
Hiring Range
At Komatsu, your base pay is one part of your total compensation package. This role pays $130,000-165,000. The actual offer will consider a wide range of factors, including experience and location.
Company Benefits
Komatsu provides an extensive and robust employee benefits package that is designed to enhance the well-being of our employees and family members. We embrace a positive and empowering employee experience with a culture that prides itself on a diverse and inclusive environment.
- Health benefits: Medical, dental, vision, HSA, wellness programs, etc.
- 401k and/or employee savings programs
- Employee time off (vacation and designated holidays)
- Employee and family assistance programs
- Disability benefits
- Life insurance
- Employee learning and development programs
Diversity & Inclusion Commitment
At Komatsu, we come from diverse backgrounds, with unique perspectives, experiences and contributions. We believe that our people are part of our shared purpose. Connected by our core values of ambition, perseverance, collaboration and authenticity, we are committed to continually advancing in our support of diversity and inclusion. United, we are on a journey towards a sustainable future that creates value together.
Company Information
Komatsu develops and supplies technologies, equipment and services for the construction, mining, forklift, industrial and forestry markets. Headquartered in Tokyo, Japan, Komatsu employs more than 64,000 people worldwide, operating in more than 140 countries. For more than a century, the company has been creating value for its customers through manufacturing and technology innovation, partnering with others to empower a sustainable future where people, business and the planet thrive together. Since the company’s founding in 1921, Komatsu has been committed to supporting individuals and communities through job training, skills development and giving back. As a Komatsu employee, you will be encouraged to grow alongside our global company, contributing to a more sustainable future for all. If you are looking for a company that values your talent and potential, join Komatsu to be a part of something big and help advance modern society. Learn more at www.komatsu.com.
EEO Statement
Komatsu is an Equal Opportunity Workplace and an Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.