Senior Information Security Compliance Lead
Core
Leading enterprise-wide cybersecurity compliance, governance, and assurance programs to ensure regulatory and contractual requirements are met.
Role type
Senior Information Security Compliance Lead (GRC)
Builds
Enterprise Information Security Management System (ISMS) and compliance frameworks
Domain
Semiconductor / Information Security / Cybersecurity Governance
Deliverable
dashboards & analysis
Required skills
ISO/IEC 27001, SOC 2 Type II, CMMC, NIST Cybersecurity Framework, Risk Management, Third-Party Risk Management, Security Governance, Policy Management, Audit Management, Executive Reporting
Preferred skills
CISA, CISSP, SOC 2 Auditor, CMMC Certified Professional (CCP), CMMC Certified Assessor (CCA)
Technologies
ISO/IEC 27001:2022, NIST 800-171, NIST CSF
Responsibilities
Lead external certification audits and surveillance audits for ISO 27001; Manage SOC 2 Type II readiness and control testing; Lead CMMC readiness and certification initiatives; Perform gap assessments, risk assessments, and control maturity evaluations; Establish governance metrics, dashboards, and executive reporting; Partner with Legal, Privacy, Internal Audit, and business stakeholders to ensure compliance.
Seniority
Senior, hands-on IC