IT GRC Specialist

Hexagon’s Autonomous Solutions division is looking for an IT GRC Specialist to join our team in Tucson, AZ. Reporting to the appropriate IT leadership team, this role will support Hexagon Autonomous Solutions’ governance, risk, and compliance capability by ensuring IT systems, controls, and processes align with regulatory requirements, internal policies, and business-adopted standards while helping strengthen the security, integrity, and compliance posture of the organization.

• →Bachelor’s degree in Computer Science, Computer Engineering, Management Information Systems, Information Technology, or a related field. Equivalent combinations of education, certifications, and experience will be considered.
• →10+ years of experience working within large, complex IT environments.
• →Knowledge of information security standards and compliance requirements including ISO 27001, NIS2, NIST 800-171, CMMC, TISAX, and GDPR.
• →Experience with IT and information security technologies and controls including cybersecurity, networks, infrastructure, applications, cloud services, and enterprise platforms.
• →Proven experience in IT governance, risk management, and compliance.
• →Strong communication and interpersonal skills with the ability to work effectively with cross-functional stakeholders.

• Professional certifications such as CISSP, CISA, CRISC, CGEIT, ISO 27001 Lead Implementer, or similar.
• Experience supporting global manufacturing, industrial technology, or multinational organizations.
• Experience with GRC platforms, audit management tools, and compliance automation solutions.

• Strong understanding of governance, risk, compliance, and information security principles.
• Ability to build trusted relationships across IT, Information Security, Legal, Finance, Procurement, and business teams.
• Strong analytical skills with the ability to identify risks and develop practical remediation strategies.
• Excellent organizational skills with the ability to manage multiple audits, assessments, and compliance initiatives simultaneously.
• Commitment to continuous improvement and operational excellence.
• Ability to communicate complex compliance and risk concepts clearly to both technical and non-technical audiences.

Not sure if you meet all the qualifications for this role? Let us decide! At Hexagon, we are committed to a diverse and inclusive work environment. If you’re excited about the opportunities this role could bring, we encourage you to apply. If you have any questions about the role or our company, please email our team at hrrecruitingteam.ap@hexagon.com and we will be pleased to follow up with you. Please do not send cover letters or resumes to this address.