IT Program Manager

IT Program Manager - Cyber ComplianceEaton's Corporate Sector division is currently seeking an IT Program Manager - Cyber Compliance. The expected annual salary range for this role is $130000 - $190000 a year. This role can sit out of one of the following locations: Beachwood OH, Galesburg MI, Houston TX, Menomonee Falls WI, Moon Township PA, or Raleigh NC.Please note the salary information shown above is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations.What You'll Do:Position Overview: The Program Manager – IT Cyber Compliance orchestrates and delivers Eaton's multi-framework cybersecurity compliance program end to end, translating the CISO's compliance vision into an executable, measurable plan. The role is the driving force behind Eaton's pivot from reactive, event- and audit-driven activity to a continuous, assurance-based compliance capability — treating certifications as a strategic capability rather than a one-time event.This is a delivery-accountable program management role with deep compliance expertise. The Program Manager runs the full program lifecycle — scope, schedule, budget, risk, dependencies, and outcomes — across concurrent certification and assessment workstreams spanning CMMC 2.0, SOC 2, ISO 27001, Cyber Essentials Plus (CE+). Success is the consistent, predictable achievement and sustainment of compliance assurance that protects revenue, contract eligibility, and customer preference with Eaton's largest customers and regulators.The role is a key contributor to Eaton's "Test-Once / Apply-Many" evidence model, enabling reusable assurance across multiple regulatory and customer frameworks, directly supporting the Eaton CISO's Strategy.Key Responsibilities:Compliance Program Leadership & Delivery• Own end-to-end delivery of Eaton's Cyber Compliance Transformation Program, meeting defined objectives, timelines, scope, budget, and business outcomes across all in-scope frameworks, control and sites. • Translate the CISO's compliance strategy into an integrated program plan, roadmap, and roles-and-responsibilities matrix; maintain the program charter as the authoritative governing artifact. • Operate a single program intake so framework demands are prioritized, sequenced, and paced through one coordinated model rather than competing efforts.Framework-Specific Compliance Expertise• CMMC 2.0 (critical path): lead Level 2 readiness across in-scope environments — self-assessment, POA&M remediation, CUI protection, C3PAO assessment scheduling and execution — aligned to NIST SP 800-171 and US Department of Defense / Department of War contract requirements. • SOC 2: manage readiness and examination cycles against the Trust Services Criteria, coordinating control evidence and auditor engagement for shared services and customer-facing environments. • ISO 27001: sustain ISMS certification and surveillance/re-assessment cycles across certified sites, including mandatory documentation, internal audits, and external (e.g., BSI) assessments. • Cyber Essentials & CE+: drive certification and vulnerability-remediation readiness required for UK MOD and BAE contractual obligations, coordinating with assessors (e.g., URM / IASME) and site owners. • TISAX & sector regulations: maintain TISAX and adjacent regulatory obligations (e.g., EASA Part-IS for aerospace sites), mapping shared controls to reduce duplicate effort.Unified Control & Continuous Assurance• Advance the Unified Control Framework and "Test-Once / Apply-Many" evidence model so a single control set and reusable evidence satisfy many frameworks. • Shift the program from point-in-time audits to continuous control testing and monitoring, ensuring controls operate effectively and assurance can be demonstrated at any time. • Partner with Internal Audit to define what "great" looks like, validate control testing models, and reduce exceptions through standardized remediation and tracking.Stakeholder, Risk, Dependency & Financial Management• Serve as the face of the program — owning the plan, risks, executive presentations, and escalations — and the senior point of coordination with control owners, regional security leads, IT, legal, and business stakeholders. • Proactively identify, mitigate, and resolve risks, issues, and cross-framework dependencies to protect delivery timelines, using a CISO-level escalation path where needed. • Actively manage budgets, forecasts, and resources to optimize delivery efficiency and program value.Key Responsibilities:Audit Readiness & Assessment Execution• Lead assessment-ready posture — compliance preparation playbooks, mock assessments, and standardized audit responses — and sequence concurrent certifications through a roadmap-based plan. • Oversee the quality, traceability, and reuse of compliance evidence in Eaton's systems of record, and coordinate post-assessment issue tracking and remediation validation.Governance, Reporting & Program Performance• Deliver decision-ready visibility into program health through status reporting, OKRs/KPIs/KRIs, leadership presentations, and steering-committee facilitation, with timely minutes, actions, and follow-ups. • Apply disciplined program governance and methodology to keep multi-workstream delivery on track and decision-making timely.Innovation, Automation & AI Enablement• Champion scaling compliance through automation and AI — improving evidence quality and reuse, accelerating customer and regulatory questionnaire responses, and surfacing trends, gaps, and emerging risks. • Pilot and embed continuous control monitoring and GRC tooling that reduces manual effort while improving predictability and quality, alongside the risk enablement team.Continuous Improvement & Maturity Advancement• Advance Eaton's Compliance Maturity Model from Reactive ? Proactive ? Optimized, applying lessons learned to streamline processes and strengthen integration across risk, controls, and compliance.Qualifications:Required Qualifications:• Bachelor's degree from an accredited institution in Information Security, Risk Management, Information Technology, Business Administration, or a related field (or equivalent experience). • 10+ years of experience in program/project management, with significant time leading cybersecurity compliance, GRC, audit, or assurance programs. • Strong working knowledge of cybersecurity compliance frameworks — CMMC 2.0 / NIST SP 800-171, ISO 27001, SOC 2, Cyber Essentials / CE+, and TISAX. • Proven ability to deliver large, multi-workstream programs end to end — scope, schedule, budget, risk, and dependencies — and meet delivery commitments. • Strong leadership, analytical, problem-solving, documentation, and stakeholder-management skills. • Excellent communication and presentation skills, including executive and steering-committee engagement. • Ability to operate effectively and independently in a global, matrixed organization.This position requires access to export-controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must be a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158No relocation is offered for this position. All candidates must currently reside within 50 miles of Beachwood, OH: Moon Township, PA: Galesburg MI: Houston TX: Menomonee Falls WI: or Raleigh NC.Preferred Qualifications:• Program/project management certification — PMP, PgMP, Scrum Master, or Product Owner. • Compliance/security certifications — e.g., CMMC Registered Practitioner (RP) / Certified Professional (CCP), CISA, CISM, or ISO 27001 Lead Implementer / Lead Auditor. • Experience with unified control frameworks and "Test-Once / Apply-Many" assurance models. • Familiarity with continuous control monitoring, GRC automation platforms, and AI-enabled compliance, audit, or risk tooling. • Experience partnering closely with Internal Audit and enterprise risk teams. • Experience in regulated or defense/aerospace environments (e.g., US DoD/DoW, UK MOD, EASA, C3PAO assessments, CUI/ITAR).Additional Information:Strategic Alignment:• Achieving and sustaining assurance of compliance across CMMC 2.0, SOC 2, ISO 27001, CE+, and TISAX• Protecting revenue, contract eligibility, and customer preference• Reducing evidence duplication and exceptions through unified controls and continuous testing• Delivering predictable, high-quality, assessment-ready compliance outcomes• Embedding innovation and AI into compliance operationsSuccess is measured by readiness, reuse, reduced exceptions, fewer repeat findings, and sustained assurance.Why This Role Matters at Eaton