Cybersecurity Compliance Program Manager

Littelfuse (NASDAQ: LFUS) is a diversified industrial technology manufacturing company shaping solutions for the safe and efficient transfer of electrical energy. Headquartered in Chicago, Illinois, USA, we serve customers across industrial, transportation, and electronics markets worldwide. With approximately 16,000 employees we design and manufacture innovative technologies that support electrification, energy efficiency, and advanced automation. Our global reach is matched by a culture that empowers innovation and long-term growth. Guided by our principles We Care, We Succeed With Our Customers, and We Own the Outcome, we work collaboratively, think boldly, and deliver solutions that move industries forward.

Position Summary

Reporting directly to the Chief Information Security Officer (CISO), the Cybersecurity Compliance Program Manager is a hands-on, player-coach leader who owns the company’s compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements. This individual translates requirements into practical controls and personally creates or improves the processes, policies, procedures, standards, templates, and evidence needed for continuous audit readiness.

The ideal candidate combines program leadership with direct execution across cybersecurity, infrastructure, applications, governance, and risk—setting direction while developing deliverables, resolving gaps, and driving implementation, certification, remediation, and continuous improvement.

Key Responsibilities

Own, build, and execute the compliance portfolio: Lead applicable requirements and personally develop roadmaps, governance, workplans, milestones, accountability, and readiness routines—not only coordinate them.

Create and maintain the compliance operating system: Draft and implement processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.

Perform assessments and drive remediation: Lead audits and reviews; assess controls and evidence, document gaps, develop corrective actions, and validate sustainable closure.

Design and operationalize technical controls: Translate requirements into implementable controls and work hands-on across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.

Strengthen and automate controls: Develop or improve system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.

Lead cross-functional execution: Coordinate global technology, manufacturing, legal, contracts, audit, procurement, and business teams while creating missing deliverables and removing barriers.

Manage third-party obligations: Track supplier and subcontractor compliance and advise management on CMMC and contractual flow-down requirements.

Report, improve, and prepare: Provide executives with clear readiness and risk metrics, monitor regulatory change, maintain incident response plans, and reinforce compliance ownership through guidance and awareness.

Required Qualifications

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.

Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.

Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements associated with government, defense, regulated, or export-controlled information.

Broad, hands-on experience across infrastructure, networks, Linux and Windows, Active Directory, Microsoft 365, cloud, endpoints, applications, identity, vulnerability management, logging and SIEM, incident response, and third-party risk.

Hands-on experience with control design and testing, secure configuration, technical assessments, SSPs, policy and procedure development, audit evidence, and corrective actions.

Strong program management, analytical, communication, and executive presentation skills, with the ability to lead through influence in a matrixed, global organization.

Preferred Qualifications

Experience in a global manufacturing company, including plants, operational technology, engineering, product development, and complex supply chains.

Experience harmonizing multiple frameworks through a common control model and using GRC, ticketing, evidence-management, SIEM, configuration-management, and compliance-automation tools.

Relevant certification such as CISSP, CISM, CRISC, CGRC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CISA, or PMP.

Leadership and Success Measures

Hands-on ownership and execution: Sets direction, creates missing processes and documentation, works directly through complex gaps, builds alignment, and holds owners accountable.

Program outcomes: Controls and documentation are implemented, assessments are achieved on schedule, findings are sustainably closed, evidence remains audit-ready, and leaders have timely visibility.

#LIOB1

Artificial intelligence (AI) tools may be used in some portions of the candidate review process for this position, however, all final employment decisions will be made by a person.

Salary Range: $104,400 - $161,760 The salary offered will vary depending on your location, job-related skills, knowledge, and experience.

At Littelfuse, we support employee growth and development. Guided by our culture principles, our teams work together to deliver value for customers and make a positive impact in the communities where we operate. We are an equal opportunity employer committed to fostering an inclusive workplace where everyone has the opportunity to grow and contribute. We offer competitive compensation and benefits, performance-based incentives, flexible work arrangements, and development opportunities.