Security Compliance Specialist
Core
Advises business units on security requirements for certification readiness (SOC 2, ISO 27001, PCI DSS, HIPAA, Nacha), reviews documentation, identifies gaps, and coordinates with auditors and shared services to ensure audit compliance.
Role type
Security Compliance Specialist (Audit & Certification Readiness)
Builds
Security gap analysis reports, control recommendations, and coordination notes for audit evidence collection
Domain
Information Security / Compliance / Audit
Required skills
Security & compliance assessment, SOC 2/ISO 27001/PCI DSS/HIPAA/Nacha knowledge, documentation standards evaluation, audit coordination, shared services scoping, security control recommendations
Preferred skills
CISSP, ISO 27001 Lead Implementer, CISA, PCIP, PCI ISA
Technologies
SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, Nacha
Responsibilities
Advises on security requirements for certifications, reviews security documentation for alignment, identifies security gaps, advises on evidence collection, provides scoping input for shared services, coordinates with internal/external auditors, tracks audit findings to closure
Seniority
Mid-level, hands-on IC
