Security Engineer
Job Posting: Since 1953, Ferguson has been a source of quality supplies for a variety of industries.
Job Posting:
Since 1953, Ferguson has been a source of quality supplies for a variety of industries. Together We Build Better infrastructure, better homes and better businesses. We exist to make our customers’ complex projects simple, successful, and sustainable. We proactively solve problems, adapt and grow to continuously serve our customers, communities and each other. Ferguson, a Fortune 500 company, is proud to provide best-in-class products, service and capabilities across the following industries: Commercial/Mechanical, Facilities Supply, Fire and Fabrication, HVAC, Industrial, Residential Trade, Residential Building and Remodel, Waterworks and Residential Digital Commerce. Ferguson has approximately 36,000 associates across 1,700 locations. Ferguson is a community of proud associates who operate with the shared purpose of building something meaningful. You will build a career that you are proud of, at a company you can believe in.
Lead Information Security Engineer - Governance & Risk (GRC)
The Lead Information Security Engineer - Governance & Risk is an experienced cybersecurity leader responsible for strengthening Ferguson's overall security framework through enterprise risk management, security governance, third-party risk oversight, and security awareness programs. This role serves as a trusted advisor throughout the company. It helps identify, assess, communicate, and reduce cybersecurity risks. It also drives ongoing improvement in security maturity and risk management practices. This role centers on leading Ferguson's phishing simulation and security awareness initiative. The job includes crafting risk-informed campaigns, analyzing user behavior and program efficiency, and supporting a strong culture of cybersecurity awareness throughout the organization. The role also leads enterprise risk assessments, third-party security reviews, governance initiatives, along with executive reporting which supports informed decision-making and risk-based prioritization.
Partnering closely with peers in Information Security, Technology, Internal Audit, Procurement, Legal, HR, Communications, and business leaders, the Lead Information Security Engineer dedicated to Governance and Risk transforms sophisticated cybersecurity risks into actionable business insights and recommendations. The ideal candidate combines deep expertise in risk and cybersecurity governance along with threat assessment and mitigation, paired with good communication, customer influence, and program leadership skills.
Location: This role is approved to be fully remote and can be based anywhere in the continental United States.
Duties & Responsibilities:
Posted July 31, 2026