Manager, Information Security - Risk Management

Work Location Type

Hybrid

W.W. Grainger, Inc., is a leading broad line distributor with operations primarily in North America, Japan and the United Kingdom. At Grainger, We Keep the World Working® by serving more than 4.5 million customers worldwide with products and solutions delivered through innovative technology and deep customer relationships. Known for its commitment to service and award-winning culture, the Company had 2024 revenue of $17.2 billion across its two business models.

In the High‑Touch Solutions segment, Grainger offers approximately 2 million maintenance, repair and operating (MRO) products and services, including technical support and inventory management. In the Endless Assortment segment,  offers customers access to more than 14 million products, and  offers more than 24 million products. For more information, visit

The anticipated base pay compensation range for this position is $ to $.

This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g. OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position.

With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:

• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full‑time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non‑birth parents.

For additional information and details regarding Grainger's benefits, please visit the link below:

The pay range provided above is not a guarantee of compensation. The range reflects the potential base pay for this role at the time of this posting based on the job grade for this position. Individual base pay compensation will depend, in part, on factors such as geographic work location and relevant experience and skills.

The anticipated compensation range described above is subject to change and the compensation ultimately paid may be higher or lower than the range described above.

Grainger reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion at any time, consistent with applicable law.

The Manager of Security Risk serves the essential function of bringing clarity, transparency, and relevance to the otherwise daunting experience associated with security controls, risk management, policies, standards, and assessments. As a collaborative partner to stakeholders and a motivating leader to the team, this role aims to drive simplicity, automation, and effectiveness to the overall Information Security program.

• Lead the Information Security Risk team in alignment with security strategy and regulatory or legal obligations.
• Manage and execute the security risk program in collaboration with Information Security teams and stakeholders.
• Manage, align, map, and continuously improve the internal security controls framework and control owner relationships in conjunction with the compliance team.
• Provide integration expertise of vendor risk reviews, control exceptions, risk assessments, or security control requirement services.
• Act as a subject‑matter expert to stakeholders and the team in relation to the spirit of controls, associated security framework or regulation, and alignment to information security.
• Ensure hiring, training, staff development, performance management, and annual performance reviews are aligned and effectively executed to continue to grow skills…