Senior Analyst, Cybersecurity Compliance

Location: North Carolina 
 

About Us 
Imagine a company with technology leadership of over 160 years, yet it operates with the energy of a startup. Ingersoll Rand has dedicated itself to Making Life Better for its employees, customers, shareholders, and planets. We produce innovative and mission-critical flow creation and life science technologies, from compressors to precision handling of liquids, gasses, and powers, to increase industrial productivity, efficiency, and sustainability. Supported by over 80+ brands, our products are used in various end-markets including life sciences, food and beverage, clean energy, industrial manufacturing, infrastructure, and more. Across the globe, we’re driving growth with an entrepreneurial spirit and ownership mindset. Learn more at irco.com and join us to own your future. 

Job Overview: 
Ingersoll Rand is seeking a Senior Analyst, Cybersecurity Compliance to support and mature our cybersecurity compliance program. This role will serve as the primary subject matter expert for cybersecurity regulations and compliance requirements, including the EU Cyber Resilience Act (CRA), NIS2 Directive, EU Machinery Regulation, CMMC, UK Cyber Essentials other emerging regulatory obligations. 

The successful candidate will partner with business units, product teams, engineering, procurement, legal, quality, IT, and cybersecurity stakeholders to establish governance processes, compliance frameworks, guidance, training, assessments, and reporting capabilities. This role will help the organization understand, implement, and maintain compliance with applicable cybersecurity regulations while proactively monitoring regulatory developments and supporting readiness across the enterprise. 

Responsibilities: 

Cybersecurity Compliance Program 

• Serve as the primary subject matter expert for the EU Cyber Resilience Act (CRA), NIS2 Directive, EU Machinery Regulation, CMMC2, UK Cyber Essentials and other emerging cybersecurity regulations. 

• Develop and maintain compliance frameworks, guidance documents, assessment methodologies, templates, and tools to support cybersecurity compliance efforts. 

• Provide consistent interpretation of regulatory requirements and cybersecurity best practices to business stakeholders and compliance owners. 

• Support the development and maintenance of cybersecurity policies, standards, procedures, and governance processes necessary to meet cybersecurity obligations. 

• Create repeatable compliance processes that enable business functions and product teams to achieve and maintain regulatory compliance. 

Business Support & Enablement 

• Partner with business units, engineering teams, IT teams, procurement, legal, quality, and cybersecurity stakeholders to help them understand and meet cybersecurity compliance obligations. 

• Provide guidance, consultation, and support on implementing regulatory and compliance requirements. 

• Develop and deliver training, awareness materials, workshops, and educational content related to cybersecurity regulations. 

• Assist stakeholders with identifying compliance gaps and developing remediation plans. 

• Facilitate the sharing of best practices and lessons learned across the organization. 

Regulatory Monitoring & Compliance Intelligence 

• Monitor emerging and evolving cybersecurity, privacy, digital resilience, and technology regulations. 

• Evaluate regulatory changes and communicate potential impacts to business stakeholders and cybersecurity leadership. 

• Maintain awareness of applicable regulations, standards, and guidance documents to ensure Ingersoll Rand remains prepared for future compliance obligations. 

• Develop compliance readiness plans for new and upcoming regulatory requirements. 

• Serve as a trusted advisor on regulatory developments impacting Ingersoll Rand products, services, operations, and third-party relationships. 

Third-Party & Supply Chain Compliance 

• Support third-party cybersecurity review activities required to meet EU cybersecurity compliance requirements. 

• Work with procurement, legal, engineering, and cybersecurity teams to assess supplier cybersecurity capabilities and compliance posture. 

• Assist in evaluating third-party providers, software suppliers, and cybersecurity-related supplier risks. 

• Support the collection and maintenance of compliance evidence associated with third-party and supply chain requirements. 

• Contribute to the development of processes supporting cybersecurity compliance and third-party risk management objectives. 

Program Governance & Reporting 

• Develop and maintain compliance metrics, dashboards, and executive reporting. 

• Track compliance status, risks, remediation activities, and readiness efforts across business units. 

• Prepare recurring status reports for cybersecurity leadership and business stakeholders. 

• Support audits, assessments, customer inquiries, and regulatory reviews related to cybersecurity requirements. 

• Maintain visibility into compliance risks, issues, and remediation priorities. 

Requirements: 

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Compliance, Risk Management, or a related discipline. 

• 5+ years of experience in cybersecurity, compliance, governance, risk management, regulatory compliance, product security, or a related field. 
   

Core Competencies: 

• Product cybersecurity compliance and regulatory interpretation 

• Governance process development and stakeholder enablement 

• Risk assessment, issue tracking, and remediation coordination 

• Executive reporting, metrics, and compliance readiness communication 

• Collaboration across engineering, legal, procurement, quality, cybersecurity, and business teams 

Preferences: 

• Experience with cybersecurity regulations and frameworks, such as EU CRA, NIS2, EU Machinery Regulation, CMMC Level 2, UK Cyber Essentials Plus, ISO 27001, or NIST CSF.

• Knowledge of cybersecurity governance, risk management, compliance, and control frameworks.

• Experience developing governance processes, regulatory guidance, training, and compliance reporting.

• Experience conducting compliance assessments, gap analyses, audits, and supplier or third-party cybersecurity reviews.

• Experience collaborating with global engineering, IT, cybersecurity, legal, procurement, and compliance teams.

• Relevant certifications such as CISSP, CISM, CRISC, Security+, or ISA/IEC 62443.

• Strong written, verbal, presentation, organizational, and analytical skills.

• Proven ability to manage multiple projects, priorities, and cross-functional stakeholders in a global environment
   

Travel & Work Arrangements/Requirements 

• Ability to work effectively across global teams and time zones. 

• Limited travel may be required based on business, project, stakeholder, or assessment needs.