Cyber Risk & Compliance Analyst

At DuPont, our purpose is to empower the world with essential innovations to thrive. We work on things that matter. Whether it’s providing clean water to more than a billion people on the planet, producing materials that are essential in everyday technology devices from smartphones to electric vehicles, or protecting workers around the world. Discover the many reasons the world’s most talented people are choosing to work at DuPont. Why Join Us | DuPont Careers Position Overview  The Senior IT Compliance Specialist is a hands-on, globally oriented role responsible for translating regulatory, customer, and internal security requirements into sustainable controls, defensible evidence, and audit-ready operations. The position partners across security, legal, business, support, engineering, infrastructure, and cloud teams to advance compliance outcomes without creating unnecessary operational friction.  This role is designed for an experienced practitioner who can independently lead workstreams, influence control owners, communicate with auditors and customers, and improve the way compliance work is scoped, documented, monitored, and automated.  Role mandate  Make compliance executable: clarify scope and ownership, design practical controls, maintain evidence, anticipate change, and keep priority programs ready for assessment throughout the year.

Compliance leadership and program delivery  Lead and manage IT compliance initiatives to ensure adherence to internal policies, standards, contractual obligations, and applicable international or government security frameworks.  Own assigned workstreams from requirement intake and scoping through control mapping, gap assessment, remediation, evidence readiness, and ongoing governance.  Maintain compliance strategies, roadmaps, and operating plans that align security requirements with business priorities, technology architecture, and delivery commitments.  Establish clear accountability with business owners, IT asset owners, and control owners; track decisions, risks, dependencies, and remediation commitments to closure.  Assessments, certifications, and audit readiness  Drive certification and assurance efforts by coordinating internal audits, external assessments, customer reviews, risk assessments, and security documentation submissions.  Plan and facilitate readiness activities for ISO 27001, NIST SP 800-171, CMMC, TISAX, NIS2, and other requirements assigned to the team.  Coordinate requests with assessors and third-party auditors, validate the completeness and quality of evidence, and ensure responses are accurate, consistent, and traceable.  Manage findings and corrective actions using a risk-based approach, including root-cause analysis, remediation planning, validation, exception handling, and status reporting.  Promote continuous readiness by defining evidence expectations, review cadences, health indicators, and escalation paths rather than relying on point-in-time audit preparation.  Control design, implementation, and monitoring  Interpret framework and regulatory requirements and translate them into clear, testable control objectives, control activities, evidence requirements, and ownership models.  Partner with engineering, infrastructure, application, cloud, security operations, identity, data, and support teams to embed controls into technology processes and system lifecycles.  Assess control design and operating effectiveness, identify gaps or duplicated effort, and recommend practical remediation that balances risk, compliance, and operational needs.  Support continuous monitoring through defined metrics, automated evidence collection, exception reporting, and periodic control reviews.  Contribute to reusable control mappings and a unified control approach to reduce duplication across overlapping frameworks and customer obligations.  Documentation and stakeholder support  Maintain and enhance System Security Plans