Lead Analyst Security Compliance
Hdjq Cx_1 · Cluj Napoca, Cluj, Romania · hybrid
If you are a Governance, Risk and Compliance (GRC) Lead Analyst professional looking for an opportunity to grow your career, Emerson has an exciting opportunity for you. In this role, you will help drive cybersecurity compliance and risk management initiatives across the organization, with a primary focus on the European Union Network and Information Security Directive (NIS2). You will collaborate with global stakeholders to assess security controls, identify compliance gaps, support remediation efforts, and strengthen Emerson’s overall cybersecurity posture. This position also provides the opportunity to contribute to broader information security initiatives, including ISO 27001, ISO 27002, TISAX, and other cybersecurity frameworks, while serving as a trusted advisor on compliance and governance matters.In This Role, Your Responsibilities Will Be:- Lead and support NIS2 assessments across Emerson, evaluating information security controls, processes, and practices.
- Document security controls, coordinate evidence collection, and maintain compliance-related records.
- Identify compliance gaps and support the development, implementation, and tracking of remediation plans.
- Partner with internal teams and external stakeholders to implement and maintain security measures aligned with NIS2 requirements.
- Monitor progress toward compliance objectives and help ensure timely completion of action plans.
- Prepare and communicate compliance status, risks, recommendations, and program updates to key stakeholders and leadership.
- Support business units during external audits and compliance reviews.
- Develop and deliver awareness sessions, workshops, and guidance on NIS2 requirements and cybersecurity best practices.
- Monitor regulatory and framework changes and help maintain alignment with evolving compliance expectations.
- Coordinate audit activities, including scheduling, stakeholder communications, evidence gathering, and audit preparation.
- Review audit findings, track corrective actions, and report on remediation progress.
- Support control assurance and compliance initiatives that strengthen Emerson’s cybersecurity and risk management capabilities.
- Lead or contribute to gap assessments, framework implementations, continuous improvement efforts, and governance activities related to ISO 27001, ISO 27002, TISAX, and other security standards as needed.
Who You Are:You consistently achieve results, even in complex or evolving environments. You anticipate and adopt innovative technologies and digital solutions that strengthen business outcomes. You apply knowledge of business operations, risk management, and the broader marketplace to advance organizational goals. You effectively plan, prioritize, and align work to meet commitments while supporting strategic objectives and driving continuous improvement.For This Role, You Will Need:- Experience in information security, cybersecurity compliance, risk management, governance, or related disciplines.
- Knowledge of cybersecurity frameworks and standards such as NIS2, ISO 27001, ISO 27002, TISAX, or similar regulatory and security frameworks.
- Experience conducting security assessments, compliance reviews, audits, or control evaluations.
- Ability to analyze compliance requirements, identify risks or gaps, and support the development of practical remediation plans.
- Strong communication and relationship-building skills, with the ability to collaborate effectively across diverse teams and stakeholder groups.
- Project coordination and organizational skills, including experience managing priorities, schedules, and compliance activities.
- Proficiency in English, both written and verbal.
- Willingness and ability to travel up to 20% as required.
Preferred Qualifications That Set You Apart:- Bachelor's degree in Information Technology, Information Systems, Computer Science, Cybersecurity, or a related field, or equivalent combination of education and relevant experience.
- Experience supporting or leading external audits and compliance assessments.
- Working knowledge of multiple cybersecurity and compliance frameworks beyond NIS2.
- Professional certifications related to information security, governance, risk, compliance, or auditing.
- Proficiency in one or more additional European languages.
- Experience supporting the implementation or continuous improvement of information security management systems.
Our Culture and Commitment To You:At Emerson, we prioritize a workplace where every employee is valued, respected, and empowered to grow. We foster an environment that encourages innovation, collaboration, and diverse perspectives—because we know that great ideas come from great teams. Our commitment to ongoing career development and growing an inclusive culture ensures you have the support to thrive. Whether through mentorship, training, or leadership opportunities, we invest in your success so you can make a lasting impact. We believe diverse teams working together are key to driving growth and delivering business results.At Emerson, our values of innovation, integrity, collaboration, and inclusion guide everything we do. We welcome individuals with diverse backgrounds, experiences, and perspectives and recognize that different viewpoints strengthen our teams and fuel better outcomes. If you are excited about advancing cybersecurity governance and compliance while contributing to a culture of continuous learning and improvement, we encourage you to apply.