Ingram Micro Inc.
Sr Principal, GRC
Irvine, CA, United States of America · Principal
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Green-card follow-through: 62%
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Possess a highly specialized level of technical expertise or business acumen.
- Extensive breadth and depth of knowledge arrived through exposure to emerging technical advancements or complex business situations.
- Minimum 10 years of functional experience including a minimum of 7 years of relevant work experience in information security, risk management, IT audit, technical writing, or information security governance
Responsibilities
- Design and manage an effective Third-Party Risk Management (TPRM) program, including due diligence, contracting, onboarding, monitoring, and offboarding.
- Develop audit and compliance testing procedures and communicate findings and recommendations to senior management.
- Collaborate with legal, procurement, IT, and business leaders to ensure awareness and understanding of risk program requirements and responsibilities.
- Support the execution of internal and external audits, including preparation, evidence gathering, and remediation follow-up.
Requirements
- Experience managing a risk register
- Experience managing the risk exception process
- Experience creating remediation plans for cyber risks
- Experience creating presentations for all types of audiences
- Internal or external audit experience with ITGCs
Nice to have
- Relevant certifications such as CISA, CFE, CISSP, CRISC, or CIA are a plus.
- Demonstrated knowledge and experience with PCI compliance requirements and implementation.
- Current PCI-QSA certification preferred (will consider former QSA)
Skills
- Technical leader with an understanding of cloud technologies, API systems, infrastructure, network, and mobile security.
- The ideal candidate will also have one or more of the following skills and/or qualifications:
- Advanced verbal and written communication skills
Compensation
- The typical base pay range for this role across the U.S. is USD $158,900.00 - $270,100.00 per year.
This listing is sourced directly from Ingram Micro Inc.'s careers page and normalized into a canonical job model.