Littelfuse (NASDAQ: LFUS) is a diversified industrial technology manufacturing company shaping solutions for the safe and efficient transfer of electrical energy. Headquartered in Chicago, Illinois, USA, we serve customers across industrial, transportation, and electronics markets worldwide. With approximately 16,000 employees we design and manufacture innovative technologies that support electrification, energy efficiency, and advanced automation. Our global reach is matched by a culture that empowers innovation and long-term growth. Guided by our principles We Care, We Succeed With Our Customers, and We Own the Outcome, we work collaboratively, think boldly, and deliver solutions that move industries forward.
Position Summary
Reporting directly to the Chief Information Security Officer (CISO), the Cybersecurity Compliance Program Manager is a hands-on, player-coach leader who owns the company’s compliance portfolio, including CMMC, NIST SP 800-171, ISO/IEC 27001, ITAR, and other customer, contractual, regulatory, and industry requirements. This individual translates requirements into practical controls and personally creates or improves the processes, policies, procedures, standards, templates, and evidence needed for continuous audit readiness.
The ideal candidate combines program leadership with direct execution across cybersecurity, infrastructure, applications, governance, and risk—setting direction while developing deliverables, resolving gaps, and driving implementation, certification, remediation, and continuous improvement.
Key Responsibilities
Own, build, and execute the compliance portfolio: Lead applicable requirements and personally develop roadmaps, governance, workplans, milestones, accountability, and readiness routines—not only coordinate them.
Create and maintain the compliance operating system: Draft and implement processes, policies, procedures, standards, control narratives, SSP content, control mappings, templates, evidence, exceptions, and reporting.
Perform assessments and drive remediation: Lead audits and reviews; assess controls and evidence, document gaps, develop corrective actions, and validate sustainable closure.
Design and operationalize technical controls: Translate requirements into implementable controls and work hands-on across endpoints, servers, networks, identity, cloud, applications, logging, vulnerability management, data protection, and incident response.
Strengthen and automate controls: Develop or improve system baselines, identity and Microsoft 365 reviews, network hardening, allowlisting, configuration management, SIEM use cases, scripts, and automated evidence and remediation workflows.
Lead cross-functional execution: Coordinate global technology, manufacturing, legal, contracts, audit, procurement, and business teams while creating missing deliverables and removing barriers.
Manage third-party obligations: Track supplier and subcontractor compliance and advise management on CMMC and contractual flow-down requirements.
Report, improve, and prepare: Provide executives with clear readiness and risk metrics, monitor regulatory change, maintain incident response plans, and reinforce compliance ownership through guidance and awareness.
Required Qualifications
Bachelor’s degree in cybersecurity, information technology, computer science, engineering, risk management, or a related field, or equivalent practical experience, with at least five years of relevant experience.
Hands-on ownership of cybersecurity compliance or complex enterprise programs, including personally creating and implementing processes, policies, procedures, standards, control documentation, evidence packages, and remediation plans.
Demonstrated experience with CMMC, NIST SP 800-171, ISO/IEC 27001, and requirements associated with government, defense, regulated, or export-controlled information.
Broad, hands-on experience across infrastructure, networks, Linux and Windows, Active Directory, Microsoft 365, cloud,…