IT Governance, Risk & Compliance Analyst I

About us:  At Plexus, our vision is to help create the products that build a better world.  Driven by a passion for excellence, we partner with leading Aerospace/Defense, Healthcare/Life Sciences and Industrial companies to design, manufacture and service some of the world’s most transformative products, including advanced surgical systems, diagnostic instruments, healthcare imaging equipment, mission critical aerospace systems, and electric vehicle (EV) charging solutions. Visit Plexus.com to learn more about our unwavering commitment to our vision. 

When we invest in our people, we invest in building a better world. 

With a vision rooted in the wellbeing and inclusive engagement of our team members, our customers, their end users and our communities, people are the heart of what we do and who we are. It is our values that unite us and guide us in everything that we do, including how we operate, behave and interact to foster a workplace where every team member feels valued and empowered to contribute their best.  

Our values include: Growing our People, Building Belonging, Innovating Responsibly, Delivering Excellence and Creating Customer Success. 

As a team member, you will engage in impactful work through global collaboration and the use of emerging technologies, join an inclusive culture where every team member is valued and working toward a greater purpose, and be empowered to reach your full potential through various development programs designed to accelerate your growth. 

Plexus offers a comprehensive benefits package designed to support team members' wellbeing, including medical, dental, and vision insurance, paid time off, retirement savings, and opportunities for professional development. We also prioritize work-life balance and offer a variety of perks to enhance the team member experience.  For more information, visit our US benefits website at usbenefits.plexus.com. Our commitment to pay range transparency fosters an equitable workplace, where everyone can feel valued. The annual compensation range for this position is stated below. The salary offered within this range will be based upon the geographic location, work experience, education, licensure requirements and/or skill level. Salary Range:

Purpose Statement: The IT Governance, Risk & Compliance Analyst I is responsible for supporting the development, implementation, and monitoring of IT policies, risk management processes, and compliance requirements. This role acts as a first-line representative of the IT Governance, Risk, and Compliance (GRC) team, establishing foundational relationships with technical and non-technical teams to ensure the accurate and timely collection of audit evidence. Additionally, this role is responsible for assisting in the development of proactive IT control plans, executing control tests, and maintaining a high level of attention to detail to enhance overall audit proficiency.

Key Job Accountabilities:

• Compliance Assessment: Assist in conducting internal security reviews and readiness assessments to measure compliance with industry frameworks (e.g., NIST CSF, ISO/IEC 27001, CIS COBIT, CIS Controls) and industry regulations (e.g., SOX, SEC, GDPR, HIPAA).
• Risk Register & Evidence Management: Assist in identifying and documenting IT risks within the Risk Register; serve as a primary coordinator for the collection, organization, and initial quality review of evidence for internal and external audits.
• Control Execution & Monitoring: Support the design of IT controls and execute control tests; proactively track and follow up with stakeholders to ensure the timely completion of evidence submission and control performance.
• Policy Support: Assist in drafting, reviewing, and proposing updates to IT policies, standards, and procedures to ensure documentation remains current and aligned with industry best practices and regulatory changes.
• Third-Party Risk Management (TPRM): Participates in and supports the GRM team in completing security questionnaires from prospective vendors and assists in evaluating the security posture of third-party partnerships against organizational standards.
• All GT team members are responsible for upholding the organization's cybersecurity posture by adhering to security policies and procedures, actively participating in training, protecting data and systems, actively identifying and mitigating vulnerabilities, and promptly reporting any suspicious activity or potential security incidents.

Education/Experience Qualifications:

• Bachelor’s Degree with 1 or more years of related experience is preferred. An equivalent combination of education and/or experience will be considered.
• Industry recognized certifications such as the CompTIA Security+ or the CISA are not required, but preferred.

Other Qualifications:  

• Foundational knowledge of industry-standard security frameworks (e.g., NIST CSF, ISO 27001, or CIS Controls) and their application in building a corporate security program is required.
• Basic understanding of core security technologies (e.g., EDR, DLP, SIEM, and Vulnerability Management) and their role in validating control effectiveness and maintaining regulatory compliance is required.
• Ability to translate technical security data into clear, concise documentation and reports for non-technical stakeholders is required.
• Proficiency in spreadsheet software (e.g. Google Sheets, Microsoft Excel) for tracking compliance metrics and generating reports is required.
• Basic grasp of enterprise IT architecture—including cloud environments (GCP/AWS/Azure), networking, and database management—with the ability to identify where security controls are necessary to mitigate risk is preferred.
• Familiarity with Google Cloud, AWS, or Azure cloud security concepts is preferred.
• Experience in technical support or help desk work, preferably in a manufacturing setting, is preferred.

This document does not represent a contract of employment and is not intended to capture every possible assignment the incumbent could be asked to perform.

We are pleased to provide reasonable accommodations to individuals with disabilities or special requirements.  If you need an application accommodation, please contact us by email at [email protected]. Please include your contact information and clearly describe how we can help you. This email is for accommodation requests only and cannot be used to inquire about the status of applications.

We are an Equal Opportunity Employer (EOE) and do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Some offers of employment are contingent upon successfully passing a drug screen and/or background check.