Lead Information Security Auditor, GRC

CONMED Corporation

. Lead the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance frameworks .

Posted 10/19/2026full-timeRemote • Florida • United StatesSenior💰 $104,134 - $163,640 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk management, and compliance, with a strong focus on regulatory frameworks such as NIST CSF, ISO 27001, and GDPR. Proven ability to lead risk assessments, develop metrics, and present findings to executive leadership while ensuring alignment with business objectives.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementCompliance ProgramsNIST CSFISO 27001

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentsCybersecurity PoliciesGovernance FrameworksCyber Risk RegisterMetrics DevelopmentRegulatory ComplianceThird-Party Risk ManagementAudit CoordinationVulnerability ManagementBusiness Continuity Planning

Soft Skills

LeadershipMentoringCommunicationCollaborationPresentation Skills

Tools & Technologies

ServiceNow GRCArcherOneTrustAuditBoard

Certifications & Qualifications

CISSPCRISCCISMCGRCCISAISO 27001 Lead ImplementerISO 27001 Lead Auditor

Industry Keywords

HealthcareMedical Device ManufacturingLife SciencesRegulated IndustriesCybersecurity Frameworks

Tech Stack

Tools & technologies

CloudCyber SecurityServiceNow

About the role

Key responsibilities & impact

Lead the development, implementation, and maintenance of cybersecurity policies, standards, procedures, and governance frameworks
Establish governance processes aligned with business objectives and regulatory requirements
Maintain alignment with NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and applicable industry regulations
Develop and present cybersecurity metrics, KPIs, KRIs, and risk dashboards to executive leadership
Facilitate cybersecurity steering committees and governance forums
Track remediation and ensure accountability for risk mitigation
Lead enterprise-wide cybersecurity risk assessments and risk management programs
Maintain a cyber risk register covering enterprise IT, manufacturing systems, cloud services, and connected medical devices
Evaluate risks involving patient safety, operational resilience, intellectual property, regulatory exposure, and business continuity
Perform risk assessments for new technologies, business initiatives, mergers, acquisitions, and strategic projects
Develop risk treatment plans and monitor mitigation efforts through completion
Translate technical security risks into business impact statements
Lead cybersecurity compliance efforts and coordinate internal audits, external audits, regulatory inspections, and customer security assessments
Manage evidence collection, control validation, remediation tracking, maturity assessments, and gap analyses
Partner with Internal Audit, Legal, Compliance, and Regulatory Affairs
Oversee audit findings and corrective action plans through closure
Lead third-party cybersecurity due diligence and risk assessments
Establish supplier security requirements and contractual security obligations
Evaluate supplier security posture and drive remediation and risk acceptance
Partner with Engineering, Product Development, Quality, and Regulatory Affairs on product security governance
Oversee cybersecurity risk assessments for medical and surgical devices
Support secure development governance and cybersecurity documentation
Facilitate coordinated vulnerability disclosure governance and vulnerability management oversight
Lead cybersecurity awareness, education, and compliance initiatives
Develop targeted awareness programs and support phishing awareness, policy compliance, and security training
Measure and report program effectiveness and compliance trends
Support business impact analyses, resilience planning, tabletop exercises, and cyber crisis management planning
Evaluate recovery capabilities and resilience controls
Provide leadership for cybersecurity governance, risk, and compliance initiatives
Mentor cybersecurity professionals
Serve as primary cybersecurity liaison for Audit, Compliance, Legal, Quality, and Regulatory Affairs
Present risk and compliance updates to executive leadership, committees, and external stakeholders
Support strategic cybersecurity planning and roadmap development

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Information Technology, Business, Engineering, Risk Management, or related field (or equivalent experience)
7+ years of experience in cybersecurity, information security governance, risk management, compliance, audit, or related disciplines
Experience developing and managing cybersecurity governance, risk, and compliance programs
Experience conducting risk assessments and managing enterprise risk registers
Experience supporting internal audits, external audits, and regulatory examinations
Strong understanding of cybersecurity frameworks and regulatory requirements
Experience in healthcare, medical device manufacturing, life sciences, or regulated industries
Deep knowledge of NIST CSF, NIST 800-53, ISO 27001, SOX, GDPR, NIS2, and third-party risk management practices
Experience managing enterprise GRC platforms such as ServiceNow GRC, Archer, OneTrust, or AuditBoard
Experience developing executive risk reporting, metrics, and board-level presentations
Familiarity with medical device cybersecurity regulations and product security risk management
Professional certifications preferred: CISSP, CRISC, CISM, CGRC (formerly CAP), CISA, ISO 27001 Lead Implementer or Lead Auditor
This position is not eligible for employer-visa sponsorship

Benefits

Comp & perks

Competitive compensation
Excellent healthcare including medical, dental, vision and prescription coverage
Short & long term disability plus life insurance -- cost paid fully by CONMED
Retirement Savings Plan (401K) -- CONMED matches your contributions dollar for dollar, with the potential for up to 7% per pay period
Employee Stock Purchase Plan -- allows stock purchases at discounted price
Tuition assistance for undergraduate and graduate level courses
Employee Referral Program incentives